last executing test programs: 25.151146155s ago: executing program 4 (id=4088): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x4040000) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000d40)=""/210, 0xd2}, {&(0x7f0000002900)=""/239, 0xef}], 0x2}, 0x8910}], 0x1, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRES32=r5, @ANYBLOB="000000000000000030001280080001007369740024000280080014002f00000008000300ac"], 0x50}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r4) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r6, 0x89e1, &(0x7f0000003280)={'geneve1\x00', 0x0, 0xb}) sendmsg$key(r4, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[], 0x80}}, 0x0) mmap(&(0x7f0000fef000/0x10000)=nil, 0x10000, 0x2000000, 0x100030, r1, 0xff02c000) r7 = socket(0x10, 0x80002, 0x0) recvmsg(r7, &(0x7f0000000300)={&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000380)=""/182, 0xb6}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000500)=""/201, 0xc9}, {&(0x7f0000000600)=""/136, 0x88}, {&(0x7f00000006c0)=""/165, 0xa5}, {&(0x7f0000000780)=""/169, 0xa9}, {&(0x7f0000000840)=""/197, 0xc5}, {&(0x7f0000000440)=""/104, 0x68}, {&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000000a00)=""/137, 0x89}], 0xa, &(0x7f0000000b80)=""/172, 0xac}, 0x10081) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) 24.916360001s ago: executing program 0 (id=4092): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="6bb501002c00070113000000ffdbdf25037c0000080001800400060019000280040001809c8bd70dd57c47"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) close(r3) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/1, 0x1}], 0x1, 0x0, 0x593) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@dev, @in=@dev}, {@in6=@private0, 0xfffffffc, 0x6c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 24.650979347s ago: executing program 0 (id=4094): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000071103d00000000009500000700000000aeee5491640a1fd6cdfb91156b42379919e5f8c74e50789608b12fa0629a30cc8bd10b71dc2ace0e4d13b2d416b6c45a57b889e4bde2875e08ffa6fc3812d38ada525eb4006ce482d3c9fca2a42883d678c5d225d75ef58879b85ccbdff5931c339d1eb44a9fa1cbb9c4cbb4ccd5e4eb6fd8a4000270e70271463b2962e44e2d80fc8fc58286d0cc888773c76bc17014caa23f0c09dbb13e950100746b4e28bfdd039e3390f88b965bfb5c8ed7b6dfaaae2e94"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000041c000980100002800c00018008000140000000020800014000000003"], 0x364}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x300, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7d}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES64=r0, @ANYBLOB="01002ebd700e000000001400000018000180140002006e657464657673696d30000000000000050019000000000308001500f1ffff01050018"], 0x44}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'ip6tnl0\x00', 0x8000}) 24.401056077s ago: executing program 0 (id=4100): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x28}}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_getanyicast={0x14, 0x3e, 0x536511c7e10367d, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x240400c0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x5, 0x0, 0x1, {{}, {@val={0x8, 0x3, r6}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 24.100775501s ago: executing program 0 (id=4103): ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000000)={0x1, 0x8001}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0xff, 0xe}}, 0x1c}}, 0x40000) read(0xffffffffffffffff, &(0x7f0000000180)=""/141, 0x8d) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000190001090000000000100000021800000000fd000000000008000100ac141400080005000a01010208000b0060"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000000)={0x1, 0x8001}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0xff, 0xe}}, 0x1c}}, 0x40000) (async) read(0xffffffffffffffff, &(0x7f0000000180)=""/141, 0x8d) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000190001090000000000100000021800000000fd000000000008000100ac141400080005000a01010208000b0060"], 0x34}}, 0x0) (async) 24.100092431s ago: executing program 4 (id=4104): getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x6f, "4a8b17d2f9122570e32f5844a0810209faa8e1a3958ac99913251793aca97c30a88d7fc6a2cc19b7ecfb1a2b5baa9070f25796083f18ef77a3b8a8e2eb8bffc618c59a1299d7f0d93211305fd1e8d831628717bb4019cee8efa97421b2c831aa2e5bf0badd40facac87bfd635d4fda"}, &(0x7f0000000100)=0x77) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={r0, 0x9, 0x20, 0x2, 0x8}, &(0x7f0000000180)=0x18) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001f"], 0x3}}, 0x0) (async, rerun: 32) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) 23.937617419s ago: executing program 0 (id=4107): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0xe) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) bind$l2tp(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast, 0x2}, 0x10) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xe, &(0x7f0000001000)=ANY=[@ANYRES8=0x0], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11}, 0x94) getsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000f80), &(0x7f0000000fc0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000025c3210a"], 0x48) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close(r4) 23.922732971s ago: executing program 4 (id=4109): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000040001"], 0x1c}}, 0x0) 23.742459915s ago: executing program 0 (id=4110): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002"], 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x4, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0xd9}, @TCA_FQ_PLIMIT={0x8}]}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x220, 0x220, 0x308, 0x308, 0x220, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50100000000ac8add8607000000", @ANYRES32=r10, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01000000ff"], 0x38}}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000520001000000000000000000020300000c00010001"], 0x20}}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)={0x78, r11, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xfffffffe, 0x4f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_DURATION={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x600000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}]]}, 0x78}, 0x1, 0x0, 0x0, 0x4800}, 0xc000) socket(0x22, 0x2, 0x59) setsockopt(r7, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f00000003c0), &(0x7f0000000400)=0x8) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 23.675348192s ago: executing program 4 (id=4112): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={0x0, 0xf, 0x0, [0x2, 0x1, 0x0, 0x6, 0x80000001], [0x0, 0x10001, 0xfffffffffffffff9, 0x1, 0x1ff, 0xff, 0x5, 0xc, 0xff2, 0xbf3f, 0x1b, 0x4, 0x40e, 0x7, 0x4, 0x7b, 0x1, 0x1, 0x8, 0x6, 0x8, 0x8, 0x6, 0x6, 0x6, 0x9, 0x5, 0x9, 0x6, 0x3, 0x7ff, 0xff, 0x5, 0x4, 0xc, 0x40000000000000, 0x8, 0x5, 0xfffffffffffffff3, 0x4, 0x5, 0x4, 0x80000000, 0x3, 0x8000000000000000, 0x80000000, 0x64f, 0x800, 0x9, 0x7, 0x7, 0x3, 0x0, 0x2, 0xfffffffffffffff7, 0x3ff, 0x855, 0x2, 0x401, 0x2, 0x1, 0xfffffffffffffffc, 0x7f, 0x40, 0xfffffffffffffff7, 0x4, 0x10000000000000, 0x1, 0x7, 0x5, 0x200, 0x10000, 0x3, 0x1, 0x8001, 0xbb76, 0x7fff, 0xfffffffffffff56b, 0x2ba25501, 0xeaff, 0x7, 0x8, 0x10000, 0xffffffffb6d43f77, 0x1, 0xe, 0x100000001, 0x0, 0x6, 0x0, 0xf, 0x7, 0x4, 0x2, 0xfffffffffffffff9, 0xb4a, 0x732, 0x1, 0x6, 0x4c, 0xbe, 0x518, 0xa95a, 0x7fff, 0x2, 0xff, 0x0, 0xfff, 0x5, 0x6, 0x3, 0x1ff, 0xfff, 0x982, 0x222, 0xfffffffffffffc00, 0x7, 0x6, 0x61c4, 0xd7, 0x3]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000500)={r1, 0x9, 0x0, [0x351, 0xd5, 0x200, 0x8, 0x40], [0x0, 0x100000, 0x2, 0xf899, 0x800, 0x9, 0x2, 0x7, 0x8, 0x8, 0x87a4, 0x101, 0x7fff, 0x1, 0x1, 0xa4e, 0x5, 0x9, 0x8, 0x7fff, 0x5, 0x0, 0x54, 0x1, 0x2, 0xffffffffffffffff, 0x3e4c, 0x5, 0x7, 0x2, 0x2, 0x200, 0x4, 0x5c, 0x1, 0x8, 0x6, 0x9, 0x3, 0x5, 0x7c, 0x7f, 0x1000, 0x6, 0x3, 0xf, 0x40, 0x8, 0xd1f7, 0xe, 0x1, 0x40, 0x80000000, 0x41c, 0x3f, 0x4919e3ea, 0x87, 0x2, 0xc3f9, 0x7, 0xe, 0xf, 0x80000000, 0x8, 0xc, 0xc5ee, 0x7fff, 0x2, 0x7fffffffffffffff, 0xd92d, 0x10001, 0x0, 0xffffffffffffffff, 0x9, 0x8, 0x3ff, 0xffffffffffffffff, 0x2, 0xc65a, 0xa37f, 0x2, 0xf, 0x4, 0x7, 0x0, 0x9, 0x7fffffffffffffff, 0x4, 0xe510, 0x3, 0xe, 0x0, 0x5, 0x800, 0x9, 0x3, 0x80, 0xe46000000000000, 0x66c, 0x6, 0xc6b, 0x6db, 0x80, 0x9, 0x0, 0x3, 0x4, 0x4000000000, 0xfffffffffffffffb, 0x8, 0xfffffffffffffff8, 0x0, 0x8, 0x8, 0x4, 0x3fb136df, 0x6, 0x5, 0x4, 0x1, 0x8000]}) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000940), &(0x7f0000000980)=0x4) r2 = accept$packet(r0, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a00)=0x14) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000000a40)) sendmsg$nl_route(r0, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=@ipv4_getrule={0x1c, 0x22, 0x2, 0x70bd2b, 0x25dfdbfe, {0x2, 0x14, 0x0, 0x2, 0x81, 0x0, 0x0, 0x2, 0x1}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000f40), &(0x7f0000000f80)=0x4) r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000000fc0)={0x8, {0xf, 0x3, 0x4, 0x0, 0x2}}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000001000)=0x7fff, 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000010c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000001340)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001300)={&(0x7f0000001100)={0x1cc, r4, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x5d}}}}, [@NL80211_ATTR_IE={0x19b, 0x2a, [@tim={0x5, 0x2f, {0x80, 0x65, 0x8, "6cd672eb71ed8c96132015e15aeab8b15f30777f19b781453fd5d004832fe3982cd72557f6375fc34983e1ca"}}, @ibss={0x6, 0x2, 0x400}, @random_vendor={0xdd, 0x83, "3c57366261c6df5cd14a6fbd17169689c7959f768ac91f2e39040103665993a076e24fa081a803f69bc5116056075fc5d60828724300e3e80e305866c3d70c5d746eba1e64fea23d97a7eb0455a801a748424589ce7fb66d582d8b5d40e84b6f59d89cfe405bfc97089e6b8f394a902bd89bb028c3ae679ed19ec45cf3484de85643fa"}, @random_vendor={0xdd, 0xd8, "be2ec3554a6c9363a7ebfce8b9eefe57094131e3e36a4c81b4057b6cb93b89bb23fd7cb0f14f3c313beb202cb881e76d12d724e4062c1985942434e3e46202ede4c56e3bb08e063ec70a340b5f3340c4921af8274ab3154722f02cd3f576e1bb086237db675f21656424802c70df156494164217e06b4e45eca790a1f90b57a8a4c93a9c20e3e9e821ad695b5156d214f87fefc79d8132cfe86ebcec63726a0f25340fd7599ee1320f0646a9d2fb4f0833606178b7620f8ef7df339f6092a026371fc43be80e841c642af5b8cbf922ea78ba63dcb3bb2b9a"}, @erp={0x2a, 0x1}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x84}, 0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000001380)={0x0, 0x7fff, 0x4}, &(0x7f00000013c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001400)={0x9, 0x204, 0x3ff, 0x80000000, r6}, 0x10) pread64(r0, &(0x7f0000001440)=""/219, 0xdb, 0xfffffffffffffff4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001540)='./cgroup.net/syz0\x00', 0x200002, 0x0) bind$netrom(r0, &(0x7f0000001580)={{0x3, @null, 0x5}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001600)={r6, 0xd7e, 0xfdef, 0x1, 0x6, 0x1}, 0x14) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000001640)=@rose) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000001680)={0x33, @multicast1, 0x4e22, 0x1, 'rr\x00', 0x0, 0xffff, 0xb}, 0x2c) accept4$alg(r0, 0x0, 0x0, 0x0) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f00000016c0)=@null) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001700)={0x0, 0x7, 0x8000, 0x80000001, 0x6, 0x3ff, 0x3, 0x7, r6}, &(0x7f0000001740)=0x20) getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000001780)={r8}, &(0x7f00000017c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000001800)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000001840)=0x10) read$alg(r0, &(0x7f0000001880)=""/37, 0x25) 23.586938404s ago: executing program 4 (id=4113): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r2, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}}, 0x80) getsockopt$bt_BT_SNDMTU(r0, 0x11, 0xc, 0x0, &(0x7f0000000740)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c72fffffffffffffff5000002000000"}, @NFTA_MATCH_INFO={0x28, 0x3, "6ff466ed30c5ae9c6a0c8fd38bede4401f21ed7a154636f1cb41f335b595532787d8ede7"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb4}}, 0x4048010) 23.430927689s ago: executing program 4 (id=4116): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xc}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040080}, 0x20008814) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xc}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040080}, 0x20008814) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) (async) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40900}, 0x4040004) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r4, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4048010) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x44004}, 0x11) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) (async) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r7, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6tnl0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000011}, 0x2000c0c0) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r7, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6tnl0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000011}, 0x2000c0c0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80148000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x68, r7, 0x310, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:logrotate_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:dpkg_var_lib_t:s0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x80) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000800)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r8, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r9, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) openat$nci(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000980), r8) (async) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000980), r8) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x64, r11, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x2a, 0xa, 'system_u:object_r:logrotate_exec_t:s0\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff7}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x200008c4) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x64, r11, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x2a, 0xa, 'system_u:object_r:logrotate_exec_t:s0\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff7}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x200008c4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ac0)) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4011}, 0x1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c40)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r8, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r9, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SHORT_ADDR={0x6}]}, 0x2c}}, 0x20008000) (async) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r8, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r9, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SHORT_ADDR={0x6}]}, 0x2c}}, 0x20008000) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0x9c, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x2d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x49}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x81c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000f40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000000f80)={0x122c, r13, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x46}, @val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x2e, 0xc5, "5fe76706d2e938000bc42015e882a35aadf8f21193aa0ebe48d2a02e114f505f9eb4b56edf603108c1ce"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_DATA={0xef, 0xc5, "2554703dcd902b3231703a3b7bb4bcf4603de3be20ce95e41a5c00b2db4700f86ed5ca8247b2b1ea427a76425386110f03be2965dd921f615212a2e6328ac78fe25ebe4c7ffbd658fee5b2475cef149adb41b5255ff5cdadf2850a076de764a633a288a49dbc7534dd4bedd6d5267a67285dfc160d392cbeff89cb6299d66fe0de75698116932233d6d14ba36b7c861c1b4ce77e962742e28d3406991cc680d083154081e51f72f7ec9da63ea23945ddfaaeca8046a2ecf95ffd45ca14045944485cc3b3683e2e91e41cc91b87f21c68e4fa85db60af922d9deb3adc3c2b5fb48e29c8b42d51037d853295"}, @NL80211_ATTR_VENDOR_DATA={0xc9, 0xc5, "71be230a14644e51c5a85e19bbb1e196a261108733e66b9b21844c5cbbeee3f02a1954c4a4e5d9ced29740856c5955737c6621fc4bc84e1f51e2cf5837930bf026f539ec0b57ef70243c6d7943f9849004bd977ee9ca083c712c0ede9922de6d107f1bf31bd3e9ccb231629bbaf4dddd837c04a55f98a9f62dd511a73371151f4a013ccec5295b6c2e66c99ca182a63b419358128aee604a8f2657dc03d2d617258d2ef8aa9e3f4c2bd16b3080e670033d761b1f2a3e5225228789a290cedad6c76e90d5c3"}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}]}, 0x122c}}, 0x8010) 17.49958232s ago: executing program 3 (id=4171): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6800000010001fff00"/20, @ANYRES32=0x0, @ANYRES8=r0], 0x68}, 0x9}, 0x0) 17.381691352s ago: executing program 3 (id=4172): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x10) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) (async, rerun: 32) socket$unix(0x1, 0x1, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x25, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000060000001811", @ANYRES32, @ANYBLOB="00000007a1d4fa00b702000000000000850000010001000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000090a9f4ff0100000095000000000000003c"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000480)=[{0x5, 0xa, 0x2, 0x7}, {0x5, 0x4, 0x6, 0x2}], 0x10, 0xb}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRES32=r5], 0x38}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) (async) setsockopt$sock_attach_bpf(r8, 0x6, 0x5, &(0x7f0000000000), 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r12 = socket$vsock_stream(0x28, 0x1, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="641e0000fbb6d4a622c2f9ffffff37757b5d8da00e9af01ef03da8a353c3d1dbf1fe44eb1ac7f85f9874e3e5a152598277cafed1c9878b25e4d1c7b778a6d473953dd568b789ec4c", @ANYRES16=r2, @ANYBLOB="08002abd7000ffdbdf250f00000008000b000800e6ff04002d000000f8ff0a000900aaaaaaaaaabb000008000608", @ANYRES32=r3, @ANYRES32=r11], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) vmsplice(r12, &(0x7f00000004c0)=[{&(0x7f0000000400)="622473ace38f56b2375c77e2b848bf39a4e68381f556313907aa9313c45a4178471db81e96b0b10481dbbf2d466cb8b30c9612999fa33140fdf470f3c25efd61ba35247d3cc2", 0x46}], 0x1, 0x5) 17.337648474s ago: executing program 3 (id=4175): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x9d, 0x0, 0x1, 0x41c3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xcb, r4}, [@IFA_FLAGS={0x8, 0x8, 0x411}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x28}}, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0x1, 0xffffffffffffffff}, 0x4) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000d80)=""/4096, 0x41000, 0x40, '\x00', r4, @fallback=0x23, r6, 0x8, &(0x7f0000000180)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0xd, 0xfa1f, 0x2}, 0x10, 0xffffffffffffffff, r7, 0x4, &(0x7f0000000480)=[r8, r9, r10, r11], &(0x7f00000004c0)=[{0x3, 0x5, 0x9, 0x6}, {0x4, 0x4, 0x6, 0x6}, {0x4, 0x4, 0xb, 0x4}, {0x3, 0x2, 0x8, 0xe}], 0x10, 0x4}, 0x94) 17.225790852s ago: executing program 1 (id=4176): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x8931, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000100), 0x4) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="050000000000feff010044000000080003007dc610e00fc06aa29a542b4fce2bd3", @ANYRES32=r2, @ANYBLOB="0a001800030303030303000008000c0003000000"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x11, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, [0x0, 0x4000]}}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000700)="1a6f9f325e43cae30000512fb11276f4a52c2c8229451ca5043e1f51dcc5562143215de5d092d9e975123ec8d9fb83f6bf14d3adc71e95b972f61c89a8829e9c1d470e12fef8bc1aa2419deeecba83", 0x4f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="6596791582e2", 0x6}], 0x1, &(0x7f0000001f80)=ANY=[], 0x50}}], 0x3, 0x8008801) r6 = socket(0x1f, 0x4, 0x6) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x9c, 0x15, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_OBJ_USERDATA={0x4e, 0x8, "386eac5ec8a9a1c90034d61242fb1e5a4f5ac5026767848a759d74def64c6d864fd99b17695d242683781265c52f17afd1d37488530740ffb2f25c0d66cf3ad4c693f5848ca12d82a26a"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x200040c1}, 0x44000) 17.223502235s ago: executing program 3 (id=4177): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, 0x0, 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000002000000090000000000000e03000000010000000a000000000000020300000000000000aa2b031b87c60a33060000000100000000000000000000000000000000000000090000000000000001000000030010000000"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x140, 0x10, 0x413, 0xffffffff, 0x25dfdbfb, {{@in=@private=0xa010100, @in=@remote, 0x0, 0x0, 0x4e22, 0x10}, {@in6=@mcast2, 0x0, 0x32}, @in=@rand_addr=0x64010101, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x2}, {0x7, 0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x60, "25cac521"}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0xa9, 0x6, 0xcb092d00abafbac1, @private2, @dev={0xfe, 0x80, '\x00', 0x23}, 0x10, 0x8000, 0x6}}) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0) r4 = getuid() sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@flushsa={0xec, 0x1c, 0x800, 0x70bd2b, 0x25dfdbfb, {0x32}, [@lifetime_val={0x24, 0x9, {0xfffffffffffffffd, 0x1, 0x1, 0x80000000}}, @etimer_thresh={0x8, 0xc, 0x2}, @policy={0xac, 0x7, {{@in=@remote, @in=@broadcast, 0x4e23, 0xa87f, 0x4e22, 0x7, 0xa, 0x0, 0x80, 0x16, r2, r4}, {0x1, 0x5, 0x7, 0x10000, 0x7fffffff, 0x4, 0x6}, {0x3, 0x100, 0xfffffffffffffffc, 0x8}, 0x5, 0x6e6bb2, 0x0, 0x0, 0x3, 0x3}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40001}, 0x20040050) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000300)=@framed={{0x61, 0x0, 0xa, 0xfe00, 0x0, 0x69, 0x10, 0x89}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, r5}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 17.156297045s ago: executing program 1 (id=4178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000240)=0xfef, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000050000000090a010400000000000000000700000008000a40000000000900020000000031000000000900010073797a30000000000800054000000021"], 0x98}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x278, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x248, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x80, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x70, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x91b3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}]}}}, {0x64, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x77}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x6a}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x51}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xde}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0xf8, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xe4, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x6c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x49, 0x1, "3759f27e289f8cf0f0097d5469c2b17d704a0f2ce224e3ceb39f88111528e88b8a328d54a5ceb83fd6baa4a770ea2438bc54bf3276a3e0c8b4c9de5d455df15c9f141b616f"}]}, @NFTA_IMMEDIATE_DATA={0x6c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}]}], {0x14}}, 0x2a0}}, 0x0) 17.141443596s ago: executing program 3 (id=4179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) syz_init_net_socket$x25(0x9, 0x5, 0x4000000) 17.045614456s ago: executing program 1 (id=4180): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000070000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000040000000000"], 0x50) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6(0xa, 0x3, 0x5) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x2000800) mmap(&(0x7f0000b02000/0x2000)=nil, 0x2000, 0x1000002, 0x28011, r1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@deltfilter={0x24, 0x2d, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xd}, {0x9}, {0x6, 0x1fff4}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x4, 0xa}, {0x0, 0x7}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x5}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, r5, 0xb0260000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r5, 0x2000) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_GETFLAGS(r14, 0x80086601, &(0x7f0000000200)) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x28, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xdc1, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @call={0x85, 0x0, 0x0, 0x8c}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5e5b7d5c}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0xca}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0xc0}, @func]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, r13, 0x8, &(0x7f0000000340)={0xfffffc20, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x1, 0xfffffff7, 0x6}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000400)=[r14, r15], &(0x7f0000000440)=[{0x2, 0x3, 0x2, 0x7}, {0x5, 0x2, 0x1, 0x1}, {0x4, 0x4, 0xe, 0x8}, {0x5, 0x2, 0xe, 0x5}, {0x3, 0x2, 0xa, 0x4}, {0x1, 0x2, 0xa, 0xb}, {0x0, 0x1, 0x5, 0x9}, {0x3, 0x3, 0x9, 0x1}, {0x2, 0x2, 0x3, 0x8}, {0x3, 0x2, 0x10, 0xb}], 0x10, 0x80000001}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 17.044811508s ago: executing program 3 (id=4181): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0xaf4, @mcast2, 0x7}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000040)={r1, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000000)=0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={r1, 0x6}, 0x8) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000280)=""/4096, &(0x7f0000000180)=0x1000) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 16.938645242s ago: executing program 1 (id=4182): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) 16.902149052s ago: executing program 1 (id=4183): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcc) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0xfffffffc, 0x25dfdbfc, {{0x2}, {@void, @val={0xc, 0x99, {0x4, 0x3d}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}]]}, 0x30}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) (async) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000000)={{r0}, "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"}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001040), r3) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000001280)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001240)={&(0x7f0000001080)={0x194, r4, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3da8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x500000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7545}]}, @TIPC_NLA_NODE={0x130, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x200}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "93b87cd1e580f3bb5dde3dc301ffa0054c9a89e45c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xc0, 0x3, "bf78da75b0218179a8a4580ed838cfc55075b5059730158e4f9302f8ab7bb7e952d4c31151b0229589b90ef6e453ef6b552fe3e19b3a58d7a7a9f9f675e00fc21a84b3c59344aa899a12b1617b03d26d5014c8c82821628bfe4800bc74e934bd6390bee42c59d2659f476eb93d53aa60476c3c7baac466d6ee982686457699c10f8cfa0a4629ef9f23b28e023cfdfdca439b12608313ae67ebd847b0dc45d4c2bc09d5f240a057e968478ddd46908c71e3392e986614537c2eeacbc5"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x10000000}, 0x800) 16.821833946s ago: executing program 1 (id=4184): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="b40800000000000073110e00000000008510000002000000b7000000000000009500c200000000009500001200000000830345f5b3f42590c416b734596006d9dec99bdcb359ce8c"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) (rerun: 64) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000100)={0x10}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) (async) r4 = socket(0x2b, 0x1, 0x0) listen(r4, 0x0) (async) recvfrom(r4, 0x0, 0x0, 0x40000060, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'rose0\x00', @random="453ecb591a7a"}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="000088f7ffffffffffffb9aaaaaaaaaa08004500001c00d3561038fb3fc7b3009fe1e00000018000810000089078"], 0x2e) 16.394567042s ago: executing program 2 (id=4186): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) r3 = socket(0x29, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x1, 0x9, 0x8, 0x82e8, 0x2, 0x2, 0x4, 0x9, 0x8, 0x1, 0x5, 0x3, 0x5ef, 0x9, 0xbe, 0xd1, [0x3, 0xf2]}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e0000000000000002800000070000000000000057868c2ecb988f0e88ba6abef9b05b1fa162", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x1a) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r5) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x98}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r8, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x40000) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r4, 0x1, {0x2, 0x0, 0x3}, 0xff}, 0x18) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000017", @ANYRES16=r2, @ANYBLOB="010028bd7000fedbdf25140000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000039fd0b0000000000f4fc1100070000000800150005000000"], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x4800) 16.077846623s ago: executing program 2 (id=4187): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000008c0)=0x576, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000fc0)={'ip6gre0\x00', &(0x7f0000000f40)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x0, 0x1, 0x15, @dev={0xfe, 0x80, '\x00', 0x31}, @empty, 0x20, 0x8000, 0x7, 0x8}}) sendmmsg$inet(r0, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="f70b992831f756ebfcb1d5edec799f4d35533fa04c88c15022f03ffe3c18ebbc7b7f6f330163301c48f475cd3df3680704ce483b7fb653bf86ad58fb3344fe975c56210ae49a5f69a6383572491d4f7969e3b0cd8598e516b1bdf87710f704333d74c47ae677acf0e8d34a52079e9c687867a9788f5a219d619c4ff4927776a5da61be709abfa89ca8d57054ea67d2d3da207031d25dd8cdfb18a8574b097e5de8277a5ecfcad4ff95d89bb81e64", 0xae}, {&(0x7f00000000c0)="7b3dad1481d9c826cee3849ef4d570cdbd38716e76af6ab6a6a1058e109502f8f6af312621ca2abc0f01720c2921fc0201247ebf3b6f85c3246582dd76eb4f272960a451791550356b3b20f49ef5fbc4af0d7c4cf537c950198c1df2bb32c2e8848f8e", 0x63}, {&(0x7f0000000140)="cfc7799319f0f2f58385d9b1ab486568ac5137745249889d88e407c6bd7472155c78409e1cb3c54c9f0613f6474e05289ab50a3e3b582b44062c296465ca", 0x3e}, {&(0x7f0000000200)="8154df09a604f9a6ece9558f56a5809de66000405e1d88d535254d08cf7b9d1fd014ae676880aed310a2b09e7b915be3e6ba99af03fef1dede8cddeba02ae6aace63e5870e2ca75fbb173487892a63bb3711cadbcff60ab234d33941bab4eef98c435a77c3a92af4427e9737be5987fb21fa3adc8892611ef5b3d255d2", 0x7d}, {&(0x7f0000000280)="5347f031784fd08bd0727aaac1a74b0cbd293a132b882680ca19261128bbac0d074f940f4644288e0d1adaf070f5b350e6e7a57782cc26ec1e4544dee3e4aafa721c567b1663e23971b08e6f010a9ebbb6c02efc4b237c45d55302e9d93e63cd07c934eb193751d0b728e26555ff53a988069e53e04c988da0", 0x79}, {&(0x7f0000000400)="aa8ec3ee690e68f08951da3c11c652955d219f7d2e5741cb8346522ff92c8aa21718f5a38e265e3c584ada0454a5584e6cff98e61446e1ec5bd087b3a158dd2f54ce51e2913eb6ccf401954d34ff96c28600948ce204d52ea55da510436be5ba1f6f4015782f89dbd3d32a4727f94e1fb866a4d7cdd69661165f11a35cebf72791dff7e89870efcc53ff383c7fb3246d147b9a474fc49cdb994a22aaac", 0x9d}, {&(0x7f0000000340)="08997547256581861da9e60fa84477f6dbfcba42e6a208b373c6d08b0a4ac7ef7249beda1fca6b436c583df3aa56b6b355934f60a01422e58bab65da2f20e1b491cb345bcab8333b256c207e47", 0x4d}, {&(0x7f00000004c0)="2448c327f16c4b1161048779fa18cc34df6a508915c42792f2d5485d3caeede392e1581307f62c5babbb14c2c0a05414719cf066f6c27032be78cad708abd8d30880c547da0278a8c4f6d2be0b1a62cdc1815c1026b26295b1a7708dc697a02c357c6906edd07a0ff83908c27798656175067e15e0c20e7c339f0492fa99fa3c5fa00c27757870e7f95ca85f6d74021e9b568674eb7c3efee2c53221460c8972b9ecc3dda33120f2ca44dd16c85d9fc497fb2568ab354cab0740a9ddc2e0c82e776c", 0xc2}], 0x8, &(0x7f0000000640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000000}}], 0x48}}, {{&(0x7f00000006c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000700)="7633a77cab89b0f40da3a891469a345c37364daacba35bdcd8f18404cc5ec44cecea986e0bfa7dd155ca77867c92568a939493d4093d2a92ba3770ba3ba95f19c166a2818dd1c83ddbca305e7142bf8df585724e10561e1057a72725bebb553bbea02a0b94b1116c4ecd100eed91df16c68ae6ee80b7cd142ae517c50642e24a3511ff5c344abbf86bd21555c00361d2751988c92ec2831484ac6d228d91c385cefebf853b125555439a4dd4b5c931d360fc04c6c36e1e333c9abacd6899cf6978d47a243cde410ace551c5afe", 0xcd}], 0x1, &(0x7f0000000900)=[@ip_retopts={{0x58, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @generic={0x44, 0xe, "ec49a89ae89db881cddce1cb"}, @timestamp={0x44, 0x10, 0xe8, 0x0, 0x0, [0x0, 0x7, 0x8]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x20, 0xa8, 0x0, 0x5, [0x6, 0x4, 0x2, 0xb8, 0x3, 0x30000000, 0xf]}]}}}, @ip_retopts={{0x40, 0x0, 0x7, {[@generic={0x82, 0x10, "a8029d0c6cbc5934e264179d7cdf"}, @timestamp={0x44, 0x18, 0xda, 0x0, 0x8, [0x2, 0x6, 0x0, 0xed8f, 0x5]}, @lsrr={0x83, 0x7, 0x98, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}], 0x98}}, {{&(0x7f0000000840)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000000880)=[{&(0x7f00000009c0)="4c098d5cd7a9975844931a9d1e9dc57c7abf04916c17669484ef7a44634d1d63194140f73e6b1a50715baa11bb25976af74efc2309aa7bc1952c434169ca7bfd97900d404b8543e4fa89aadff6464cc8c470cc05dd", 0x55}], 0x1, &(0x7f0000000a40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffc}}], 0x48}}, {{&(0x7f0000000ac0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000b00)="e792b3f0751f8e34c9c3401f6e3f927d7cee9956061065c53e77b4410fb1ec7f997c884c958e1439204061e00d75ccc84134a8d1d47678d0b4e968e3e5d771bb460e25ed7859255bb5ce71f75f7efa45f1262bb9253015605273a6f64b8a4f9f0ac5b6ee76d929fb2495abf04df1dc540efae5e8b711d9904af34cbd090408de3cd13a8470fab4fa0885ca33fdb0b61aa2a02d99aa87c72e86e33d4869b0e1e7ae2c8a565c91868e785b971e61991a5f5c2853", 0xb3}, {&(0x7f0000000bc0)="7651f69ba0650b69c67d2611e69bcbcac415abd3d93d44a9b0f0ae8c580cc11c5f0bffd0c1563a50cc442ccbfb16fa97d1c90aa4bb856dd0d0b87f5aa7f6eaee6e3209ad6166b58ecf7e3be00e86aa52d1e33c3173ab56ad44332068f5a5f922707b7d72", 0x64}, {&(0x7f0000000c40)="26c15f5a5eb9ae7aac80e9d97078f2da5f52b09eb61fb97703d02c38210a75454e57aa19055aa2c5e3806fb780d328e83014ce228b7b04d1cf6008d2a7c5453530a2f89df7b014c2cf8baa8f61d88eec839e8b0d8affa6489deec7db7f592777365db656ebf88eea551e454da3282f2121a285bd8f1537739462d9a05c886c55501dd779fc0211c12041ccc882b0f7423d4420220a4dd9ecc32147302b7ff73f7e3659099a804b766f0ce911e3dc68911f76394667c2525a405ffacf89", 0xbd}, {&(0x7f0000000d00)="b7242c5f8ce1a5154f7837b4972806e955edebe1f14875d5fe293ee071383f75e81534059cbec1382ae6ad9e24fdd2c2609f8ba3d34b06d5a775db8eb7f208d89aeeadfe9b668c360663bb00c15758b16705b8a6a7277d1f46b25de1f0c01586f923e0f0fad1a4afd6925951c0968e756e6ddeba8abb4ce1960952c23c1055e413e4fb60d67bf0245f032acc12c73485c7ae1fe6364db7252795ca21", 0x9c}, {&(0x7f0000000dc0)="3fd903380895d695355dd70e073c5f679c43ff9eebffbccc046325d32eb5860e0693dce993e27c8d9199ef18a71254e7ea4f950efea5b52741d78093406f79fc8191dc4fe6d8f9c4b215bf45dcdc1ccde81cd34554ef83385d50ff56dd5da0e56c99fdb30b81ec334c0f3b677f9abcaf2a52d2c7cc8c268b2cdc7dff1af2df91b6ca3d9b186c48a4065b8da299788f99d88f48715c59fb0326af7cdd483e8a093c88dec59c896e16d099bc21af67f537b2888a9d3956a728a99512638cc21791a87eac3283a1bd2114f10fbd019d752ee557b1a23b98f1bc921e099c06b2274c1c44eca8bec91166", 0xe8}], 0x5, &(0x7f0000001000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @dev={0xac, 0x14, 0x14, 0x24}}}}], 0x20}}, {{&(0x7f0000001040)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000024c0)=[{&(0x7f0000001080)="7c964dfa058dc2070f1fba4221b85fc8afe8dcc4070711ff472a4cc3ce9de8ac6ea94682cbe921cffbeb5fa66546346827a2bdcd196fcf180fe9510cdca5727232988dc024a71b28b3c2242d5fdcc9572f938caa61e092efd7b4ea2a1bfcbd7722cdc7fab4c801e696698e24cc1792203e2ff02e39ddea16fa8bb73ef95a29e678cba8c10485e9acbcd0907b0a", 0x8d}, {&(0x7f0000001140)="148e08fd773ec001f1d646a0cb", 0xd}, {&(0x7f0000001180)="7750db43f383eceb61fecdb0a41d040e1602f35ffaaebd766a727a9cbfcbfe252b5fdbd0c6a0271422d1a9a45f928318bad795196357c1832216c2d6f0000bae601c6ed587a2dc50c6ac2d6a5366de9f8c97a35498013d3f8358257fb17bb39e39b0e4d7249e9fd703e5be29ec1981d2b34fc40281139355e3f9b2", 0x7b}, {&(0x7f0000001200)="4af8b8c890ee18eff160955528f179f6dfbf2d01eab6fbc76bb3ac4ad237a029f94a276d7f9aeae658ecec553d418f1402c2728875eb600a14b52566cea5199329d99396122766100be4c19e817751a62899f421e7b9da467fcc233281fa6c711deeade0c968bed3b57a5f6ce8113afc80d8635514e74b0dc2728b826d1aea209f7fca353d70f2aef1498c8f109d48f38c478edadc9e5b842c6b9893816e6dc631f61dd30490d5289414280dad12", 0xae}, {&(0x7f00000012c0)="1d2ec7668ef712bd6c01cb9073b5c6313792005ccb02ca5aeaca277b18516514a089e2b899100cfd2278cf29cd4f1aca84b1fbd13d8a1648d0c924464cceff14ba2848e1f689ca5393c61c8904cb6eca06a590a2c6dff052aeb7e36ec2850d0b3c9a7a88fd46a2077fa8c95ad7abf1edac413df703b461478bd09524b8b6e18b9b27c231b59d7de99ebf168689befea27e58bf837b78231123d4e0a8ef5e795bd8c16f5b1a2e7810520f0e6150143a5396433ba4b2a3fc157bb882d8e741a1d945906baee2d88debc563b078c4b6ac6fb270f016398e66367534afb0ccf6b378cf1356e09e51849dc8fe76b92b99056aae1555d491675c6bc2d426b74e8500e670250e023d6dc03f8fa0e04ba76cb762d7e9d7886a13e1bf793c91479b439cd445c59bfdd30ac3cc4bc010c746fb04e18bf16425ac1dfdf75e204580ceea5429e186a45acceb478db34343c00618cd253f190419a896b0de76656fc0e9974f8684de3aaa061ea17474c479b95ec291bb6c5808500fa022f3cd2cd633ad3e8a917943e4918f04f1a0cae3f515d6346a80c44b0c9956543d54ec837d4072a340d055cd1dc2048e0c79f41d877e689ea87213a0525e730920d9a6a73800db46f3f980982df19f7a0eafc1c58aba78103aec01b30f0598c8317ad71ba1f208d9b96fe23be6dc7643a21c5cdb0355ca601f8c0b66267d47af5c695f6680ed0bd2c19f5fcffc0eaed7e7288ef4562024bfa3ef9350ef77c011233a9efb88f185a3ec90c62dfdbed478d6534afca9ab31bbe31c9e7b030cef82fb0c58dad1ad0f3a874c6f65cd038031496890f2a2b4ee941c4a47b58b3430f5805cb5c0f1564e8277ea54067f9211ba531ddf42f6e376afc88619843a06acd0788c3e9b40920bc4d631444f11a2601b9d456b9d55a382c8090e427515211ca64dc26aee2a42e3d64824a90d2d022320a8d11a090c820ce16d4775e570e4a1f5e1ba30d78b490376a9e50c8e294fa516109f816f0210abcd349f3abe8f30a500c1997f57ea43705a9cd513c3e5c5a315b2cf39eea12ab0067b37c8a2be61549a54c6f13d84f2b443bbf84e7bc140acbfbfae786ec8d002452558e39a73afb2aaed62e011cd3d61c598e97ffffed14f4efce99e4f744da732139f01b643364c3aaf4c88faac76a2e433b22ff55ca15d7320c30bce94fc4615a53661c53a5f6add9c0c3db6a9f03aef7b8c7055b8c9a2f0340ffc960c98c306e54ed32b8feaa6f27acd597189912612830e4cb4810e116f9cc34d4f63868d0fa66122a974bdbf5d13fc65b01d248ed7f2eb95e6cfe10d64330005adaf305bb0fb873dad26d599d4fe1e378ac9f5195b67f225b08f76024369557faa91ea0c9431163d15de38efc709decb57a2af4f355eaee31f501f3597a18b7d746cc077dadb6121205d3b19e16a9f53b72e14cef1d6d105e664c3f0601349e379bbed905db6cf99a0da3549cc986556b16ea317f63fa6f1108c132ac05aaf286bcb454e9cb19a9c8f04969a81c8d4043f417d2661a1f6dae792ba79ee570b288b5077d6c1713f195573a350badc802a8bbca0ce08b504055ed4e83751062b0193d7cdafddde0fdd5fcc78dac52ad30b8487923baf96ab7cd1e963627c46c4c9031dbb4d092e228a4fc070900d7cf59e1efd72c1155b16c7f0adf5ef08c6a3ee08640bb9ab2139a1201bffd78dc0e9c1f604feb3d29a4f8ebd403790ecf1de612d6d3fa5e2e2807660b63c477acfa8f1bf3d9cafe2c676654eb73f548d0c747b21fb25785843a123f8406dc5825a0b7aa7b64f97bffe856e4e22815bc1b285a85f3a3bf53b384cb776ca06b9d11b44216ec2be633a42c25ec2f07f4b5a6b1ad458c21a704b967a6580413114eb5ad90612ae3ba0ea71c55d8155a8ab4c5002c2a56af283a2996a989849e754ceb44949ad7d04bb92b9bfbada961f63106855eef25cbee5f461989f790e869324b4e63dced0399348c75e0edb301cc7d6afc82280d12fc44f4e9862bf08369e12c9cfbf7679bfa080bb5e17e6f01ee4b0d087c3331a4488664bbcdb014f17d28b15035998f99efb3438918e59e9bdf00c9dbd7fcd8fc70598216e7b1ea8e62a0ab94b50ebbf945228f12e35f86ec8ace33e1df85446caab5544e920da0c779d68897225994689fc6a43d988f3da4ed1f8835fb92ad8120092463c329523bb555ae0e90f725553975d2d5efc46eccd4a22279aeeb258cf53955080d83dfbdf475538377177081150cffa7999b5a076c9b577d84e73d325167b4c93e5bbbd6f8916eca3b9f1b938e35a749e50fd5c3947671797c2049a0e627162535f9410e0ebfc75bf075d9574b5259a52a82c8d3847edd4dc5208141ed544e263ee1271ca9d90aab30764fdf8916645297ff5798224f61ef15a0fed508111bfd4b48b8a41d8c131fb1380d3e94d3d6b511aafe98669d8b716963165a97cd94315f05bd2c3831adfa9420760ca779b449d4065820b6371cf834e6da60c9d804b7b7ef669fed528d8dc3bf5c707e0066c0bd9cdd0fb80630b777b8aa5ff351da3e4f9a3f3b1db92e14556bd288ce49be2d5fa72cdb4a8473942177db1fa3679dea4beb38333471acb185a2b4e08b2190bb6cf907c4f6d54cab4596c9c806994711d71da2265f923c0f28005c36ae51500bbe1083c18313c9b9403f42caf741ca72b151b04150b63ac380685c3fd48a534c0154f145b3a57164a17c97706c04b9fffd3e95da124a1c7dbef0044b409470a40e544ba1d17ee926d597156819b2ad0ddc2c8dccd50d93f679ed814a9e23bd17aaf4aaaee5141171fed6f3eb9ddaed50bcb28357dab1ebff4e5676af9f1433751f02177999a32e3022a1437241ac633a65c499b201d2c408ef9c72d468d59df62626e144dafa6b09c10553a4f6e2cc3470c29e5a3879566650f7429a0346daf323de261e3bd794f6113e5842d25060a5ef3a259f8be6192892dd611042327a8139c2c7b2f178637c36ca0f6fa5df6022c91db0719b7f6c6ef4d9ff698ebad6df9104c28f45e7d837a1c5917c3fd2c52335005c492731225ab075848c40ca17aa37201e84e3833fd9aea5f54169299250cfd102f5bb1728f88c21fdac7d6bac438b5736027569c7a154ec3265a3056daeffca2b3443303914c5f13aa3adb0fc921db1e0224356870016b38e7771a448e300fbf2b96ebc7001e7c83e4f3de77007e3759617c6b7ffa12fcf9863f3dd4a7266462ec152945e6eb66270dc88b5fefb39bd6cbbf163b1e9b9ee717ae574d2e94ededb0ed0fe0a1c41ce33e878dd97edef7f6b04f7c3eacfd96751ea57a7782a08d10a6e4fd9c23926873b0fcc969a34ac375adbc698de5e0f7d4e2af856ea3260a052b5058f06372b934a8d701ca02dcf962d7877dc36e427af39e2cb68e91669d03fd048640c2da3745e5fc5fe0014ca61eb96dd9ad553d28b8537e3eea463857f5343068034b57c63967062f9e50f49c79609daf7b26e8f55ea0445c48d73613d8d8594a178efa1b122e0c703011bcf838bbe580cf9895408cc21e56823bde3ddf340e87e2a076862e362f1c4e04a380231b65ed011118e8f489a43e7d77d36895fa851e325be91341ae908647158c6a1f800303bcb23f5dbca8a8f25c3db17c77a41c9856a2bd73b391fae928c7ddde98dc022f26008e335b9c1c3663e449062d745c6d3c329164016e10e9b1c972c105a94017e19e4da69f98cbc2fd0f00935e96cbe9a91cdfa8241a700864d106951f53dbf6098c73c8f3841603c4110f06df055e1ce3297db7a393d29966c1cf48fee6bb7dd5a1d5c0bc730a02693ef5efff1678ce6b3782133abd76a6e6fee264d2254bb69fc6b8f8bd33c5fd32cae2d0a3931793766b7487ecf78bf1c941e7823bcc37d6cd91aa5332d62b38c26362c1bdcb2ff8a67a9fed8850cfc0d026addf252d6c41857c8bd6db45c8c9415b02b4b07ecdd87d89d338c3bc605e03b62d46c9bc51219848a9ac399cdee66037112f1e63b4079508125207f784b8bb7d18d07f9bda8409570ef65a2aab3e7759d69d0a2ec7c930457d11184f7a9337e21ba267aadfdc684e2f8beb40ace490d82dd5ae1bd385fdcc0574b368232ab1b0aad65f1ead060744bac7bfd272bd36f8bff3460c63bb97cda956077b11ef81a20906b62e819dc8e1c0f3d5480e4a1b064edfefe3e458a0670a4971b83c73a6b4016a9dbc8005b44c2e56f6e942e5490d08e890237e3b19127feca095358f000fc444a72a10db02b8e5672618ae1a832fdfeb803f527799a8c9f0382f350b3a0f09807b2aa4dc4de3a35841078eb906097da31355966f8ddd43c53de175661935f77c144e2e48fe657e32d80718a8363ac9051f220669b09363bcda460c0ff81c304aea03e3839f2a489e15264d07f499baf7048d23bc2580de3d2c8a46fa431bdafab96f1cc8db492d719bbc8df80b0b4ab09dedc812375161703a7bc7f4f91d424c55b21e8f383c29c21d5c5a7f67632d227a7bb703a8c4b86d58b9bc9b8414d757cf483c89bc260104f323b175d4cba9367a139cbecf5a46c162e532bf138ec854892ffac5f6ee0eaae13c7b3a83a7485f0168a5292193f4537166f2a6b650a2273c6b1988c88cda7371b799f9a10f15a4490547f404806f88fbf9b114db5278ddd13bbd28196f68866343319e492fff0997f3f91013d0f7dd15b7ad75b8e96e4fc95f0c353645d501f802dfa731fb059b0f2ce1a4b473ed6b2a63f8e1ea1ebc05d156f9d4fb5be69692067ecf725adeed1519fc89fd3e18d1eee4e61e2da178e02571cfa839b056b982f554885645cf8b7886479952af81f12efc1b91ae3852136dee0f615ae1fe9b0d1862282b0b4c60af09b9b4974a8f31b9a11515fd7f34acbe5400c05bb6ba139804f834f55bb1e18696116ccf393719536eb7e957f06e11e059ef040cffe631020ecac3984163776f5cb4f792fc62c11204662deb2d7da77eae6fad6edc5ab426e324289f7643e9349f27b15671e3e1ee82a61b9caa15ccd2cba210d6c47344d10943cd1b2a3267c0b6935e9023b8d93e9fb6d8534b9a9cc517f9ad5c4126edc7579df782c0d2fe73489b2647b53276962e91dfb6f640adc62007e45d99db1383d87e7c11c9093d4524cd927cc44b1fc6c712b9de7cda5a17b9f5496ca0965ad97d9eed27ab458c36bbe05c857c75939bf75c6dbe4dc1e4d9a7ce46ffd1e159f846a451cb783d71367358bff5be9dd9e119275a455c553764938c58dee0e8a45706a909afb877393ae111254139f3e79edfff3c4fd0556a50a35fedb5fdaad3d6e166c2f4a1a10bfea96b27566e6f20adc902c4e1da8db9298eebed33bcbe801e6c84cd901850f82335b11772274ab26ee27fa93c76ce13317029e3d75776d604a0f77be645e08fdf6f89726b1c86d52a04c9565be37fbb97ba7c8a4c9ece9915b9d9397f9baa9b056b411b4051959854b9fd534725e80f698cd163b32229a32d2f2733efcc9a8ab30d140c64cc22d70c34ec59cf8aa7db78024ce701e44bae62f8665be9dd86724e10ca0919637eab1187f256d796fb0feb42f117a25a7e6e967a9f8d69c4e9d110bb4b82b9ec3c0bbdf1288f6f887d0fc83048531bdb552fe060e89ab424496a50601c8a97f7b2d7893e25d6ab27989caa0a8a4ad697f376dcf26755811f5bcef0983cb29c37eed8cff17315fa46b50efa0e0bc60855097c390ff22ecf2e3a3dc3e2428237c3ee77213382814dc5c50f4d23f50dce2d3ae2b666167404ee5854aa42ddf91c0f71c944bb894e6b5556", 0x1000}, {&(0x7f00000022c0)="739671514e88e4f4c76198bf5aee174bb10e86af60e09e7be7c467fd42284a7418b0f79b05bb7b78e29dca8b0e1cae913e27d596031726d44ac3dd05986d55561eead1d711f4e04f01078401f267910c61dd0ababe894e18d0b9a6837a4b8a47be274b40514503af7e7417aa946e57876939ccd5d1149c285a5683a971aff1189fa81c95ffbfe43b6d3a5879c5c33396c3c51866fb1bf7f21ac7178f7e612446aa892a2d518b54272c4d82f1b4ce588b660fc64c2b8e6d386026a243043575bfde3b837e90e61f74433e8d38b8ec82", 0xcf}, {&(0x7f00000023c0)}, {&(0x7f0000002400)="eb96606a378b24659fd0503b21632067467ecb3d3139c5fefff05e493746c214d9c1b5a266445a59a9f70a2f93f6", 0x2e}, {&(0x7f0000002440)="abab7e7ef00c60556a54f7ca04e172fc51e7b8a83c2579847c0338e5cb442f7f4d224977ddb7f6655dfc8c8ad7414e739dfa211f14989f3f8dd874157e4b6d08b81e4f3108be94", 0x47}], 0x9, &(0x7f0000002580)}}], 0x5, 0x44040) 15.252083282s ago: executing program 2 (id=4188): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x35, &(0x7f0000000000)={@multicast1, @multicast2}, &(0x7f0000000040)=0xc) r1 = accept4(0xffffffffffffffff, &(0x7f0000000240)=@sco, &(0x7f0000000100)=0x80, 0x800) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@bridge_getneigh={0xe8, 0x1e, 0x20, 0x70bd25, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x40002, 0x10}, [@IFLA_GROUP={0x8, 0x1b, 0xb42}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}]}, @IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x54, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_MACADDR_DATA={0x40, 0x5, 0x0, 0x1, [{0xa, 0x4, @broadcast}, {0xa, 0x4, @multicast}, {0xa, 0x4, @random="bc43b5624d1b"}, {0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @link_local}]}]}}}, @IFLA_OPERSTATE={0x5}, @IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'tunl0\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}, {0x14, 0x35, 'vcan0\x00'}]}, @IFLA_OPERSTATE={0x5, 0x10, 0x3}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4090}, 0x20000081) 15.220619095s ago: executing program 2 (id=4189): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={0x0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x90, 0x30, 0x871a15abc695fa3d, 0x0, 0xfffffffd, {}, [{0x7c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) 15.141615699s ago: executing program 2 (id=4190): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) close(0x3) r1 = epoll_create(0x3) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0xfcfd}]}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x98}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="720ac40562afb1612491f13eff00000071309a00040000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) 15.136104718s ago: executing program 2 (id=4191): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, 0x0, &(0x7f0000000400)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x61, &(0x7f0000000000)={&(0x7f0000001500)=@newtfilter={0x74, 0x2c, 0xd27, 0x1070bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x13, 0x1, 0x0, 0x0, {{0x8, 0x3, 0x67e6}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xf4d6, 0x7, 0x4}, {{0x3, 0x0, 0x1}, {0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x74}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r3, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_MPATH(r8, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f00000000c0)={0x1c, r0, 0x21, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0x0, 0x99, {0x8, 0x62}}}}}, 0xfffffffffffffd67}, 0x1, 0x0, 0x0, 0x20008008}, 0xc000) 8.11269295s ago: executing program 32 (id=4110): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002"], 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x4, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0xd9}, @TCA_FQ_PLIMIT={0x8}]}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x220, 0x220, 0x308, 0x308, 0x220, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50100000000ac8add8607000000", @ANYRES32=r10, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01000000ff"], 0x38}}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000520001000000000000000000020300000c00010001"], 0x20}}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)={0x78, r11, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xfffffffe, 0x4f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_DURATION={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x600000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}]]}, 0x78}, 0x1, 0x0, 0x0, 0x4800}, 0xc000) socket(0x22, 0x2, 0x59) setsockopt(r7, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f00000003c0), &(0x7f0000000400)=0x8) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 8.080008701s ago: executing program 33 (id=4116): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xc}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040080}, 0x20008814) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xc}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040080}, 0x20008814) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) (async) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40900}, 0x4040004) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r4, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4048010) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x44004}, 0x11) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) (async) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r3) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r7, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6tnl0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000011}, 0x2000c0c0) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r7, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6tnl0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000011}, 0x2000c0c0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80148000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x68, r7, 0x310, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:logrotate_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:dpkg_var_lib_t:s0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x80) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000800)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r8, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r9, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) openat$nci(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000980), r8) (async) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000980), r8) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x64, r11, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x2a, 0xa, 'system_u:object_r:logrotate_exec_t:s0\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff7}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x200008c4) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x64, r11, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x2a, 0xa, 'system_u:object_r:logrotate_exec_t:s0\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff7}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x200008c4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ac0)) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4011}, 0x1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c40)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r8, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r9, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SHORT_ADDR={0x6}]}, 0x2c}}, 0x20008000) (async) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r8, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r9, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SHORT_ADDR={0x6}]}, 0x2c}}, 0x20008000) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0x9c, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x2d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x49}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x81c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000f40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000000f80)={0x122c, r13, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x46}, @val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x2e, 0xc5, "5fe76706d2e938000bc42015e882a35aadf8f21193aa0ebe48d2a02e114f505f9eb4b56edf603108c1ce"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_DATA={0xef, 0xc5, "2554703dcd902b3231703a3b7bb4bcf4603de3be20ce95e41a5c00b2db4700f86ed5ca8247b2b1ea427a76425386110f03be2965dd921f615212a2e6328ac78fe25ebe4c7ffbd658fee5b2475cef149adb41b5255ff5cdadf2850a076de764a633a288a49dbc7534dd4bedd6d5267a67285dfc160d392cbeff89cb6299d66fe0de75698116932233d6d14ba36b7c861c1b4ce77e962742e28d3406991cc680d083154081e51f72f7ec9da63ea23945ddfaaeca8046a2ecf95ffd45ca14045944485cc3b3683e2e91e41cc91b87f21c68e4fa85db60af922d9deb3adc3c2b5fb48e29c8b42d51037d853295"}, @NL80211_ATTR_VENDOR_DATA={0xc9, 0xc5, "71be230a14644e51c5a85e19bbb1e196a261108733e66b9b21844c5cbbeee3f02a1954c4a4e5d9ced29740856c5955737c6621fc4bc84e1f51e2cf5837930bf026f539ec0b57ef70243c6d7943f9849004bd977ee9ca083c712c0ede9922de6d107f1bf31bd3e9ccb231629bbaf4dddd837c04a55f98a9f62dd511a73371151f4a013ccec5295b6c2e66c99ca182a63b419358128aee604a8f2657dc03d2d617258d2ef8aa9e3f4c2bd16b3080e670033d761b1f2a3e5225228789a290cedad6c76e90d5c3"}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}]}, 0x122c}}, 0x8010) 2.044498843s ago: executing program 34 (id=4181): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0xaf4, @mcast2, 0x7}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000040)={r1, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000000)=0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={r1, 0x6}, 0x8) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000280)=""/4096, &(0x7f0000000180)=0x1000) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1.025597073s ago: executing program 35 (id=4184): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="b40800000000000073110e00000000008510000002000000b7000000000000009500c200000000009500001200000000830345f5b3f42590c416b734596006d9dec99bdcb359ce8c"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) (rerun: 64) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000100)={0x10}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) (async) r4 = socket(0x2b, 0x1, 0x0) listen(r4, 0x0) (async) recvfrom(r4, 0x0, 0x0, 0x40000060, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'rose0\x00', @random="453ecb591a7a"}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="000088f7ffffffffffffb9aaaaaaaaaa08004500001c00d3561038fb3fc7b3009fe1e00000018000810000089078"], 0x2e) 0s ago: executing program 36 (id=4191): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, 0x0, &(0x7f0000000400)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x61, &(0x7f0000000000)={&(0x7f0000001500)=@newtfilter={0x74, 0x2c, 0xd27, 0x1070bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x13, 0x1, 0x0, 0x0, {{0x8, 0x3, 0x67e6}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xf4d6, 0x7, 0x4}, {{0x3, 0x0, 0x1}, {0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x74}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r3, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_MPATH(r8, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f00000000c0)={0x1c, r0, 0x21, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0x0, 0x99, {0x8, 0x62}}}}}, 0xfffffffffffffd67}, 0x1, 0x0, 0x0, 0x20008008}, 0xc000) kernel console output (not intermixed with test programs): ink: 48 bytes leftover after parsing attributes in process `syz.0.2631'. [ 430.702694][T15533] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2630'. [ 430.737794][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 430.876960][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 430.998582][T15545] ip6t_srh: unknown srh match flags 5F28 [ 431.031458][T15545] netlink: 'syz.0.2635': attribute type 16 has an invalid length. [ 431.047229][T15545] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2635'. [ 431.268327][T15559] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.031709][ T140] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 433.045029][ T140] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 433.227591][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 433.294343][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e380800: rx timeout, send abort [ 433.464475][T15613] bond11: entered promiscuous mode [ 433.470446][T15613] bond11: entered allmulticast mode [ 433.477978][T15613] 8021q: adding VLAN 0 to HW filter on device bond11 [ 433.553116][T15526] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 433.633828][T15628] __nla_validate_parse: 1 callbacks suppressed [ 433.633849][T15628] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2655'. [ 433.649961][T15628] netlink: 'syz.4.2655': attribute type 2 has an invalid length. [ 433.659295][T15628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2655'. [ 433.700667][T15628] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2655'. [ 433.711730][T15628] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2655'. [ 433.732009][T15628] netlink: 'syz.4.2655': attribute type 6 has an invalid length. [ 433.742179][T15628] netlink: 'syz.4.2655': attribute type 5 has an invalid length. [ 433.766462][T15628] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2655'. [ 433.803866][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e380800: abort rx timeout. Force session deactivation [ 433.805399][T15526] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 433.962117][T15526] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 434.228887][T15646] bond10 (unregistering): Released all slaves [ 434.381301][T15665] syzkaller0: entered promiscuous mode [ 434.387072][T15665] syzkaller0: entered allmulticast mode [ 434.594434][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 434.792175][ T6029] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 434.816469][ T6029] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 434.951779][T15693] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 434.986740][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 435.146019][T15697] netlink: 'syz.3.2673': attribute type 1 has an invalid length. [ 435.225487][T15699] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2674'. [ 435.286079][T15707] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2676'. [ 435.320128][T15704] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2675'. [ 435.339473][T15704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2675'. [ 435.357820][T15704] netlink: 23 bytes leftover after parsing attributes in process `syz.1.2675'. [ 435.398208][T15701] 8021q: adding VLAN 0 to HW filter on device bond10 [ 435.409742][T15701] bond9: (slave bond10): making interface the new active one [ 435.419568][T15701] bond9: (slave bond10): Enslaving as an active interface with an up link [ 435.442617][T15703] bond9: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 435.457472][T15703] bond9: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 436.349468][T15742] netlink: 'syz.4.2685': attribute type 1 has an invalid length. [ 436.380102][T15742] netlink: 'syz.4.2685': attribute type 2 has an invalid length. [ 436.854594][T15764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.874946][T15747] syzkaller1: entered promiscuous mode [ 436.881445][T15747] syzkaller1: entered allmulticast mode [ 437.036634][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 438.261282][T15821] team0 (unregistering): Port device team_slave_0 removed [ 438.271239][T15821] team0 (unregistering): Port device team_slave_1 removed [ 438.589327][T12820] udevd[12820]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 438.603696][T15854] C: renamed from team_slave_0 [ 438.637776][T12820] udevd[12820]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 438.639059][T15854] netlink: 'syz.2.2709': attribute type 1 has an invalid length. [ 438.672751][T15854] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 438.838970][T15857] bond10: option lp_interval: invalid value (0) [ 438.853990][T15857] bond10: option lp_interval: allowed values 1 - 2147483647 [ 438.877558][T15857] bond10 (unregistering): Released all slaves [ 438.928166][T15865] tipc: Enabled bearer , priority 0 [ 438.942550][T15877] __nla_validate_parse: 15 callbacks suppressed [ 438.942571][T15877] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2714'. [ 439.016909][T15860] tipc: Resetting bearer [ 439.126930][T15890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.226373][T15895] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2721'. [ 439.339030][T15900] netlink: 'syz.3.2723': attribute type 19 has an invalid length. [ 439.384039][T15900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2723'. [ 439.408153][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.416407][T15900] netlink: 'syz.3.2723': attribute type 19 has an invalid length. [ 439.417758][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.433533][T15900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2723'. [ 439.518792][T15910] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2724'. [ 440.139273][ T5148] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 440.154653][ T5148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 440.167738][ T5148] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 440.179523][ T5148] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 440.187910][ T5148] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 440.230376][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 440.243230][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 440.251106][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 440.260857][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 440.270519][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 440.439654][T15903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.473429][T15903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.719152][T15903] macvtap0: left allmulticast mode [ 440.804699][T15903] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 440.896037][T15903] vlan0: left promiscuous mode [ 440.909227][T15903] vlan0: left allmulticast mode [ 440.917728][T15903] hsr_slave_1: left allmulticast mode [ 441.131875][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.142901][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.168431][T15858] tipc: Disabling bearer [ 441.221509][ T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.246728][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.260170][ T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.272684][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.299547][ T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.331182][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.343816][T15939] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2729'. [ 441.459678][ T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.488236][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.673234][T15953] netlink: 592 bytes leftover after parsing attributes in process `syz.1.2732'. [ 441.854048][T15962] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2733'. [ 441.916075][T15912] lo speed is unknown, defaulting to 1000 [ 441.973862][T15967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2735'. [ 442.319126][ T5148] Bluetooth: hci4: command tx timeout [ 442.385128][T15989] netlink: 'syz.0.2740': attribute type 1 has an invalid length. [ 442.479282][T15912] chnl_net:caif_netlink_parms(): no params data found [ 442.701996][T16002] netlink: 'syz.1.2742': attribute type 1 has an invalid length. [ 443.031449][T16022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2748'. [ 443.207756][T15912] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.236546][T15912] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.243887][T15912] bridge_slave_0: entered allmulticast mode [ 443.262775][T15912] bridge_slave_0: entered promiscuous mode [ 443.291435][T15912] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.303801][T15912] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.317125][T15912] bridge_slave_1: entered allmulticast mode [ 443.371809][T15912] bridge_slave_1: entered promiscuous mode [ 443.693493][T15912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.747784][T15912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.768858][T16061] netlink: 'syz.2.2754': attribute type 3 has an invalid length. [ 443.829142][T16066] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 443.865730][T16061] wg2: entered promiscuous mode [ 443.873357][T16061] wg2: entered allmulticast mode [ 443.949445][T16070] __nla_validate_parse: 1 callbacks suppressed [ 443.949464][T16070] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2756'. [ 443.969872][T15912] team0: Port device team_slave_0 added [ 444.003045][T15912] team0: Port device team_slave_1 added [ 444.230643][T15912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.250026][T15912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.252406][T16088] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2760'. [ 444.309663][T15912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.365087][T15912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.395994][T15912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.426997][ T5148] Bluetooth: hci4: command tx timeout [ 444.433779][T16097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2761'. [ 444.446002][T15912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.636646][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 444.754033][T15912] hsr_slave_0: entered promiscuous mode [ 444.780387][T16113] netlink: 'syz.1.2765': attribute type 39 has an invalid length. [ 444.781372][T15912] hsr_slave_1: entered promiscuous mode [ 444.815499][T15912] debugfs: 'hsr0' already exists in 'hsr' [ 444.833286][T16116] netlink: 'syz.1.2765': attribute type 39 has an invalid length. [ 444.853987][T15912] Cannot create hsr debugfs directory [ 445.172811][T16130] tipc: Enabled bearer , priority 0 [ 445.273540][T16137] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2771'. [ 445.371906][T16130] syzkaller0: entered promiscuous mode [ 445.378145][T16130] syzkaller0: entered allmulticast mode [ 445.387639][T16130] tipc: Resetting bearer [ 445.560494][T16128] tipc: Resetting bearer [ 445.623713][T16159] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2776'. [ 446.487459][ T5148] Bluetooth: hci4: command tx timeout [ 447.106577][T16128] tipc: Disabling bearer [ 447.380433][T16170] netlink: 'syz.0.2779': attribute type 7 has an invalid length. [ 447.433685][T15912] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.464070][T16176] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2781'. [ 447.483156][T15912] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.496102][T16176] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2781'. [ 447.507636][T15912] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 447.720583][T15912] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.742679][T15912] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.774032][T15912] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 447.831283][T16183] bond0: entered promiscuous mode [ 447.836846][T16183] bond_slave_0: entered promiscuous mode [ 447.842843][T16183] bridge_slave_1: entered promiscuous mode [ 447.863446][T16183] bond0: left promiscuous mode [ 447.879415][T16183] bond_slave_0: left promiscuous mode [ 447.895371][T16183] bridge_slave_1: left promiscuous mode [ 447.957476][T15912] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.993958][T15912] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.033423][T15912] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 448.055728][T16203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2785'. [ 448.149176][T15912] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.186977][T15912] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.209510][T16208] netlink: 'syz.2.2788': attribute type 10 has an invalid length. [ 448.216751][T15912] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 448.237255][T16208] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2788'. [ 448.293567][T16208] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 448.567240][ T5148] Bluetooth: hci4: command tx timeout [ 448.801916][T15912] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 448.848743][T15912] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 448.866722][T16230] netlink: 'syz.2.2794': attribute type 16 has an invalid length. [ 448.885294][T15912] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 448.893028][T16230] netlink: 'syz.2.2794': attribute type 17 has an invalid length. [ 449.016721][T16233] bond11: entered promiscuous mode [ 449.021919][T16233] bond11: entered allmulticast mode [ 449.027963][T16233] 8021q: adding VLAN 0 to HW filter on device bond11 [ 449.129613][T16242] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2796'. [ 449.173774][T16230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.192096][T16230] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 449.221827][T15912] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 449.250056][T15907] lo speed is unknown, defaulting to 1000 [ 449.280959][T15907] syz2: Port: 1 Link ACTIVE [ 449.513636][T15912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.585206][T15912] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.639810][ T4379] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.647160][ T4379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.673961][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.681268][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.048332][T16283] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 450.931263][T16296] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2806'. [ 452.388839][T16303] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 452.767551][T15912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.810577][T16330] veth0: entered promiscuous mode [ 452.840125][T16330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2813'. [ 452.988323][T16339] sctp: Trying to GSO but underlying device doesn't support it. [ 453.065776][T16346] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2820'. [ 453.434720][T16359] syzkaller1: entered promiscuous mode [ 453.446394][T16359] syzkaller1: entered allmulticast mode [ 453.496797][T16361] netlink: 'syz.0.2823': attribute type 32 has an invalid length. [ 453.504701][T16361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2823'. [ 453.619352][T16361] bond12: option coupled_control: invalid value (115) [ 453.637863][T16361] bond12 (unregistering): Released all slaves [ 453.834087][T15912] veth0_vlan: entered promiscuous mode [ 453.885445][T15912] veth1_vlan: entered promiscuous mode [ 453.985555][T15912] veth0_macvtap: entered promiscuous mode [ 454.023871][T15912] veth1_macvtap: entered promiscuous mode [ 454.040219][T16387] netlink: 528 bytes leftover after parsing attributes in process `syz.0.2833'. [ 454.070942][T16387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2833'. [ 454.098841][T15912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.122340][T15912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.174147][T14745] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.195339][T14745] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.246666][T14745] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.268682][T14745] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.444544][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.455281][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.567198][ T4379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.577218][ T4379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.604076][T16417] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2843'. [ 454.633436][T16419] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2844'. [ 454.661118][T16419] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2844'. [ 454.782609][T16425] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.801006][T16431] netlink: 'syz.0.2845': attribute type 16 has an invalid length. [ 454.810196][T16431] netlink: 'syz.0.2845': attribute type 17 has an invalid length. [ 454.832514][T16426] C: renamed from lo (while UP) [ 454.925630][T16431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 454.943680][T16421] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2844'. [ 454.983160][T16421] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2844'. [ 455.055213][T16437] tipc: Enabling of bearer rejected, already enabled [ 455.089486][T16439] netlink: 'syz.4.2849': attribute type 10 has an invalid length. [ 455.153920][T16439] team0: Port device dummy0 added [ 455.225273][T16454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2850'. [ 455.242650][T16444] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 455.843194][T16493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2859'. [ 455.916826][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.962815][T16496] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 456.221432][T16515] x_tables: duplicate entry at hook 2 [ 456.501103][T16527] netlink: 'syz.4.2869': attribute type 1 has an invalid length. [ 456.908504][T16545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2875'. [ 457.088241][T16549] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2876'. [ 457.356660][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.384713][T16561] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2880'. [ 458.231182][T16609] syzkaller0: entered promiscuous mode [ 458.258512][T16609] syzkaller0: entered allmulticast mode [ 458.738041][T16632] netlink: 'syz.0.2899': attribute type 29 has an invalid length. [ 458.758163][T16632] netlink: 'syz.0.2899': attribute type 29 has an invalid length. [ 459.415091][T16668] netlink: 'syz.4.2909': attribute type 4 has an invalid length. [ 459.539147][T16672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.548237][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.659753][T16672] __nla_validate_parse: 12 callbacks suppressed [ 459.659777][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2911'. [ 459.761810][T16680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2913'. [ 459.868391][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 459.878308][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 459.895331][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 459.907081][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 459.914979][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 459.996599][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 460.068780][T16687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2915'. [ 460.115301][T16687] macsec1: entered promiscuous mode [ 460.122182][T16687] bridge0: entered promiscuous mode [ 460.130058][T16687] macsec1: entered allmulticast mode [ 460.135701][T16687] bridge0: entered allmulticast mode [ 460.155455][T16687] bridge0: port 3(macsec1) entered blocking state [ 460.174544][T16687] bridge0: port 3(macsec1) entered disabled state [ 460.190266][T16687] bridge0: left allmulticast mode [ 460.195609][T16687] bridge0: left promiscuous mode [ 460.282798][T16681] lo speed is unknown, defaulting to 1000 [ 460.358020][T16692] syzkaller0: entered promiscuous mode [ 460.377200][T16692] syzkaller0: entered allmulticast mode [ 460.733490][T16722] netlink: 'syz.4.2924': attribute type 2 has an invalid length. [ 460.744292][T16715] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2923'. [ 460.853942][T16681] chnl_net:caif_netlink_parms(): no params data found [ 460.937331][T16732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2928'. [ 461.094467][T16742] netlink: 'syz.2.2930': attribute type 1 has an invalid length. [ 461.314862][T16750] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 461.355503][T16750] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 461.446647][T16742] bond6: (slave bridge9): Enslaving as an active interface with a down link [ 461.493949][T16755] bond6: (slave gretap4): making interface the new active one [ 461.504810][T16755] bond6: (slave gretap4): Enslaving as an active interface with an up link [ 461.554895][T16766] tipc: Enabled bearer , priority 0 [ 461.562933][T16762] syzkaller0: entered promiscuous mode [ 461.572028][T16762] syzkaller0: entered allmulticast mode [ 461.583131][T16681] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.591402][T16681] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.598940][T16681] bridge_slave_0: entered allmulticast mode [ 461.606826][T16681] bridge_slave_0: entered promiscuous mode [ 461.614784][T16768] tipc: Enabling of bearer rejected, failed to enable media [ 461.647605][T16774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2936'. [ 461.695849][T16765] syzkaller0: entered promiscuous mode [ 461.702067][T16765] syzkaller0: entered allmulticast mode [ 461.711931][T16681] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.723484][T16681] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.731223][T16681] bridge_slave_1: entered allmulticast mode [ 461.739384][T16681] bridge_slave_1: entered promiscuous mode [ 461.821739][T16774] 8021q: adding VLAN 0 to HW filter on device bond7 [ 461.842709][T16766] tipc: Resetting bearer [ 461.996668][ T52] Bluetooth: hci0: command tx timeout [ 463.581100][T16761] tipc: Resetting bearer [ 463.595482][T16761] tipc: Disabling bearer [ 463.610146][T16681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.646016][T16681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.824055][T16681] team0: Port device team_slave_0 added [ 463.877072][T16681] team0: Port device team_slave_1 added [ 463.982856][T16681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.005731][T16681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.072742][T16681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.087951][ T52] Bluetooth: hci0: command tx timeout [ 464.101422][T16681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.104749][T16818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2946'. [ 464.112008][T16681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.146107][T16681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.197578][T16816] netlink: 'syz.4.2944': attribute type 1 has an invalid length. [ 464.217453][T16816] nbd: error processing sock list [ 464.241650][T16816] block nbd3: shutting down sockets [ 464.349720][T16681] hsr_slave_0: entered promiscuous mode [ 464.367230][T16681] hsr_slave_1: entered promiscuous mode [ 464.375179][T16681] debugfs: 'hsr0' already exists in 'hsr' [ 464.381389][T16681] Cannot create hsr debugfs directory [ 464.409773][T16826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2949'. [ 464.430879][T16829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2949'. [ 464.573986][T16828] ip6tnl4: entered promiscuous mode [ 464.601311][T16828] tipc: Enabled bearer , priority 0 [ 464.644995][T16839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2952'. [ 464.655199][T16828] syzkaller0: entered promiscuous mode [ 464.662379][T16828] syzkaller0: entered allmulticast mode [ 464.796686][T16839] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2952'. [ 464.820194][T16843] syzkaller0: entered promiscuous mode [ 464.827968][T16843] syzkaller0: entered allmulticast mode [ 464.837163][T16828] tipc: Resetting bearer [ 464.885307][T16827] tipc: Resetting bearer [ 464.919155][T16827] tipc: Disabling bearer [ 464.967806][T16847] xt_CT: No such helper "syz1" [ 465.045762][T16853] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2956'. [ 465.181871][T16857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2958'. [ 465.222092][T16681] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.332095][T16868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2960'. [ 465.335003][T16681] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.650965][T16681] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.681218][T16884] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2963'. [ 465.703493][T16884] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2963'. [ 465.728708][T16884] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2963'. [ 465.895456][T16681] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.138730][T16904] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2971'. [ 466.158704][ T52] Bluetooth: hci0: command tx timeout [ 466.192694][T16909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2973'. [ 466.228427][T16909] openvswitch: netlink: Key type 31 is not supported [ 466.238037][T16904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2971'. [ 466.251986][T16681] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 466.278834][T16681] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 466.303511][T16681] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 466.351660][T16681] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 466.582320][T16931] netlink: 'syz.4.2977': attribute type 9 has an invalid length. [ 466.728902][T16911] lo speed is unknown, defaulting to 1000 [ 467.026132][T16948] SET target dimension over the limit! [ 467.172283][T16681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.275101][T16959] erspan0: entered allmulticast mode [ 467.303864][T16681] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.346090][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.353396][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.396961][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.404210][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.858697][T16937] lo speed is unknown, defaulting to 1000 [ 467.999542][T16977] 8021q: adding VLAN 0 to HW filter on device bond9 [ 468.060656][T16977] bond0: (slave bond9): Enslaving as an active interface with an up link [ 468.121374][T16983] syzkaller1: entered promiscuous mode [ 468.127600][T16983] syzkaller1: entered allmulticast mode [ 468.248133][ T52] Bluetooth: hci0: command tx timeout [ 468.299952][T17000] IPv6: sit1: Disabled Multicast RS [ 468.307068][T17000] sit1: entered allmulticast mode [ 468.438277][T16681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.514948][T17002] IPv6: sit1: Disabled Multicast RS [ 468.532488][T17002] sit1: entered allmulticast mode [ 468.779505][T17011] tipc: Enabled bearer , priority 0 [ 468.819277][T17012] syzkaller0: entered promiscuous mode [ 468.824906][T17012] syzkaller0: entered allmulticast mode [ 468.850227][T17011] tipc: Resetting bearer [ 468.861868][T17011] netlink: 'syz.2.2999': attribute type 1 has an invalid length. [ 468.875432][T17011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.901498][T16681] veth0_vlan: entered promiscuous mode [ 468.913902][T17010] tipc: Resetting bearer [ 468.932160][T17010] tipc: Disabling bearer [ 468.954493][T17016] xt_limit: Overflow, try lower: 271964/0 [ 468.967211][T16681] veth1_vlan: entered promiscuous mode [ 469.024386][T16681] veth0_macvtap: entered promiscuous mode [ 469.040453][T16681] veth1_macvtap: entered promiscuous mode [ 469.069824][T16681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.123370][T16681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.168452][ T6029] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.215154][ T6029] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.232107][ T6029] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.271010][ T6029] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.389888][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.412937][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.423582][T17034] syzkaller0: entered promiscuous mode [ 469.431154][T17034] syzkaller0: entered allmulticast mode [ 469.489464][T17034] tipc: Enabled bearer , priority 0 [ 469.500321][ T6024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.512272][ T6024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.540971][T17030] tipc: Resetting bearer [ 469.564803][T17030] tipc: Disabling bearer [ 469.933462][T17057] __nla_validate_parse: 15 callbacks suppressed [ 469.933482][T17057] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3014'. [ 470.610282][T17079] netlink: 'syz.1.3017': attribute type 1 has an invalid length. [ 470.720483][ T5148] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 470.730768][ T5148] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 470.741209][ T5148] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 470.751176][ T5148] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 470.760080][ T5148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 470.989886][T17097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3022'. [ 471.348179][T17115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3032'. [ 471.395079][T17084] lo speed is unknown, defaulting to 1000 [ 471.457730][T17122] IPv6: sit1: Disabled Multicast RS [ 471.535177][T17125] syzkaller0: entered promiscuous mode [ 471.541692][T17125] syzkaller0: entered allmulticast mode [ 471.649066][T17128] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3036'. [ 471.661448][T17131] x_tables: unsorted entry at hook 2 [ 471.670609][T17133] x_tables: unsorted entry at hook 2 [ 471.725736][T17131] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3037'. [ 472.213280][T17084] chnl_net:caif_netlink_parms(): no params data found [ 472.399846][T17171] netlink: 'syz.1.3046': attribute type 2 has an invalid length. [ 472.408160][T17171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3046'. [ 472.565337][T17182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3049'. [ 472.618431][T17084] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.640734][T17182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3049'. [ 472.649983][T17084] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.666571][T17084] bridge_slave_0: entered allmulticast mode [ 472.683558][T17084] bridge_slave_0: entered promiscuous mode [ 472.744905][T17084] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.763305][T17084] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.785071][T17084] bridge_slave_1: entered allmulticast mode [ 472.801447][ T52] Bluetooth: hci3: command tx timeout [ 472.821491][T17084] bridge_slave_1: entered promiscuous mode [ 472.875699][T17196] netlink: 'syz.1.3051': attribute type 8 has an invalid length. [ 473.169031][T17084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.193859][T17084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.341353][T17084] team0: Port device team_slave_0 added [ 473.370267][T17084] team0: Port device team_slave_1 added [ 473.462617][T17221] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3057'. [ 473.525491][T17221] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3057'. [ 473.550763][T17084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.562878][T17084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.627009][T17084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.697500][T17084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.710899][T17084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.739619][T17084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.824319][T17238] netlink: 'syz.0.3062': attribute type 2 has an invalid length. [ 473.928343][T17084] hsr_slave_0: entered promiscuous mode [ 473.949607][T17084] hsr_slave_1: entered promiscuous mode [ 473.995524][T17084] debugfs: 'hsr0' already exists in 'hsr' [ 474.018792][T17084] Cannot create hsr debugfs directory [ 474.315100][T17267] netlink: 'syz.0.3069': attribute type 10 has an invalid length. [ 474.371841][T17267] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 474.384211][T17268] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 474.527354][T17084] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.557077][T17084] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 474.655989][T17084] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.671825][T17084] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 474.799542][T17275] syzkaller0: entered promiscuous mode [ 474.805269][T17275] syzkaller0: entered allmulticast mode [ 474.820438][T17084] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.831148][T17084] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 474.887347][ T52] Bluetooth: hci3: command tx timeout [ 474.947488][T17290] __nla_validate_parse: 1 callbacks suppressed [ 474.947508][T17290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3074'. [ 475.005858][T17293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3074'. [ 475.841686][T17326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3080'. [ 475.905928][T17327] netlink: 'syz.2.3080': attribute type 15 has an invalid length. [ 476.003422][T17328] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3080'. [ 476.075512][T17328] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3080'. [ 476.757917][T17084] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.767974][T17084] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 476.958276][ T52] Bluetooth: hci3: command tx timeout [ 476.984663][T17333] xt_CT: You must specify a L4 protocol and not use inversions on it [ 477.128536][T17341] netlink: 'syz.4.3082': attribute type 4 has an invalid length. [ 477.155348][T17084] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 477.181348][T17347] netlink: 'syz.4.3082': attribute type 4 has an invalid length. [ 477.235623][T17084] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 477.337927][T17084] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 477.385992][T17084] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 477.482748][T17363] IPv6: sit2: Disabled Multicast RS [ 477.489718][T17363] sit2: entered allmulticast mode [ 477.520177][T17354] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.3087'. [ 477.577810][T17354] netlink: 'syz.0.3087': attribute type 4 has an invalid length. [ 477.614065][T17354] netlink: 'syz.0.3087': attribute type 4 has an invalid length. [ 477.631941][T17084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.672141][T17084] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.705925][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.713161][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.759789][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.767048][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.090283][T17382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3094'. [ 478.117745][T17383] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3094'. [ 478.122284][T17385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3095'. [ 478.158388][T17382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3094'. [ 478.539609][T17084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.689720][T17084] veth0_vlan: entered promiscuous mode [ 478.777255][T17084] veth1_vlan: entered promiscuous mode [ 478.830617][T17426] netlink: 'syz.2.3104': attribute type 15 has an invalid length. [ 478.959880][T17084] veth0_macvtap: entered promiscuous mode [ 478.988257][T17084] veth1_macvtap: entered promiscuous mode [ 478.994854][T17431] netlink: 'syz.0.3105': attribute type 10 has an invalid length. [ 479.039024][ T52] Bluetooth: hci3: command tx timeout [ 479.072388][T17431] veth0_virt_wifi: entered allmulticast mode [ 479.104020][T17431] team0: Port device veth0_virt_wifi added [ 479.186997][T17433] bond2 (unregistering): Released all slaves [ 479.343974][T17084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.395950][T17084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.439561][ T6029] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.452749][ T6029] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.474897][ T6029] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.492393][T14745] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.637738][T17460] syzkaller0: entered promiscuous mode [ 479.647836][T17460] syzkaller0: entered allmulticast mode [ 479.669038][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.697519][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.835999][T14745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.858297][T14745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.513110][T17506] __nla_validate_parse: 59 callbacks suppressed [ 480.513139][T17506] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3124'. [ 480.563280][T17508] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3125'. [ 480.709082][T17512] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20000 [ 480.716552][T17512] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20005 [ 481.065351][T17527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3128'. [ 481.188596][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 481.204370][T17530] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3131'. [ 481.214404][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 481.224828][ T5148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 481.235131][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 481.247499][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 481.329795][T17536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3131'. [ 481.348790][T17536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3131'. [ 481.378516][T17541] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3133'. [ 481.433368][T17544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3133'. [ 483.281640][ T52] Bluetooth: hci1: command tx timeout [ 483.891030][T17590] netlink: 'syz.0.3144': attribute type 9 has an invalid length. [ 483.916541][T17589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3140'. [ 483.935775][T17589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3140'. [ 484.267735][T17528] lo speed is unknown, defaulting to 1000 [ 484.754927][T17621] netlink: 'syz.3.3155': attribute type 21 has an invalid length. [ 484.804713][T17621] delete_channel: no stack [ 484.954662][T17631] netlink: 'syz.2.3157': attribute type 2 has an invalid length. [ 485.014175][T17633] netlink: 'syz.2.3159': attribute type 1 has an invalid length. [ 485.089571][T17633] bond10 (unregistering): Released all slaves [ 485.155538][T17528] chnl_net:caif_netlink_parms(): no params data found [ 485.264321][T17649] netlink: 'syz.0.3162': attribute type 21 has an invalid length. [ 485.359731][ T52] Bluetooth: hci1: command tx timeout [ 485.390327][T17660] netlink: 'syz.2.3164': attribute type 1 has an invalid length. [ 485.512322][T17661] bond10 (unregistering): Released all slaves [ 485.536946][T17528] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.544370][T17528] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.552497][T17528] bridge_slave_0: entered allmulticast mode [ 485.561998][T17528] bridge_slave_0: entered promiscuous mode [ 485.597270][T17528] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.609554][T17528] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.617932][T17528] bridge_slave_1: entered allmulticast mode [ 485.637036][T17528] bridge_slave_1: entered promiscuous mode [ 485.733283][T17677] __nla_validate_parse: 3 callbacks suppressed [ 485.733303][T17677] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3167'. [ 485.838258][T17528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.862115][T17528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.987130][T17646] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 486.018053][T17528] team0: Port device team_slave_0 added [ 486.101261][T17694] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3171'. [ 486.125117][T17528] team0: Port device team_slave_1 added [ 486.320502][T17528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.356457][T17528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.357338][T17706] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3174'. [ 486.424119][T17528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.471984][T17528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.491206][T17528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.573001][T17528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.738641][T17719] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 486.750658][T17719] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 486.761722][T17719] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 486.772330][T17719] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 486.785903][T17725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3179'. [ 486.786436][T17719] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 486.807236][T17719] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 486.820415][T17719] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 486.830958][T17719] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 486.851506][T17719] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 486.862520][T17719] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 487.287371][ T52] Bluetooth: hci0: command 0x080f tx timeout [ 487.446528][ T52] Bluetooth: hci1: command tx timeout [ 487.558830][T17727] tipc: Started in network mode [ 487.563784][T17727] tipc: Node identity e64c861a54a8, cluster identity 4711 [ 487.599802][T17743] IPVS: length: 8 != 1152 [ 487.648863][T17727] tipc: Enabled bearer , priority 0 [ 487.671474][T17730] syzkaller0: entered promiscuous mode [ 487.677431][T17730] syzkaller0: entered allmulticast mode [ 487.873336][T17528] hsr_slave_0: entered promiscuous mode [ 487.908550][T17528] hsr_slave_1: entered promiscuous mode [ 487.948863][T17528] debugfs: 'hsr0' already exists in 'hsr' [ 487.954664][T17528] Cannot create hsr debugfs directory [ 487.967702][T17752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3183'. [ 488.011192][T17713] tipc: Resetting bearer [ 488.085361][T17713] tipc: Disabling bearer [ 488.120291][T17761] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 488.663752][T17772] team0 (unregistering): Port device team_slave_0 removed [ 488.679290][T17772] team0 (unregistering): Port device team_slave_1 removed [ 488.695581][T17772] team0 (unregistering): Port device dummy0 removed [ 489.186786][T17808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3194'. [ 489.528145][ T52] Bluetooth: hci1: command tx timeout [ 490.302429][T17819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3196'. [ 490.877704][T17528] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.908487][T17528] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.011177][T17528] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.023029][T17528] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.073632][T17528] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.083617][T17528] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.120953][T17833] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3200'. [ 491.158444][T17528] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.168672][T17528] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.305417][T17840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3201'. [ 491.322351][T17840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3201'. [ 491.360734][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.385326][T17528] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 491.402452][T17528] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 491.415243][T17528] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 491.424619][T17842] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3202'. [ 491.429883][T17528] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 491.578800][T17528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.593746][T17852] bridge2: entered promiscuous mode [ 491.600829][T17852] bridge2: entered allmulticast mode [ 491.633502][T17528] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.651231][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.658500][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.680708][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.687991][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.870924][T17860] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3207'. [ 491.901654][T17860] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3207'. [ 492.207461][T17877] sctp: [Deprecated]: syz.3.3212 (pid 17877) Use of struct sctp_assoc_value in delayed_ack socket option. [ 492.207461][T17877] Use struct sctp_sack_info instead [ 492.231480][T17528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.310549][T17528] veth0_vlan: entered promiscuous mode [ 492.331654][T17528] veth1_vlan: entered promiscuous mode [ 492.344750][T17882] netlink: 'syz.0.3213': attribute type 1 has an invalid length. [ 492.356044][T17882] netlink: 'syz.0.3213': attribute type 1 has an invalid length. [ 492.381391][T17528] veth0_macvtap: entered promiscuous mode [ 492.389909][T17882] syzkaller0: entered promiscuous mode [ 492.395589][T17882] syzkaller0: entered allmulticast mode [ 492.413520][T17882] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 492.430744][T17528] veth1_macvtap: entered promiscuous mode [ 492.442964][T17882] xt_addrtype: ipv6 does not support BROADCAST matching [ 492.472646][T17528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.491818][T17528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.513028][T14745] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.535353][T14745] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.560086][T14745] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.571191][T14745] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.622770][T17885] debugfs: '“&˜%àï÷åQÍ0@æjÛÈÊ«–Óéôð} ŽæýàÅ ¸Þ}³£!' already exists in 'ieee80211' [ 492.740545][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.776031][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.855606][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.874239][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.200281][ T5148] Bluetooth: hci1: command 0x0405 tx timeout [ 493.368590][T17907] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3221'. [ 493.379132][T17907] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3221'. [ 493.398026][T17907] netlink: 'syz.1.3221': attribute type 15 has an invalid length. [ 493.406007][T17907] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3221'. [ 493.473857][T17911] x_tables: duplicate underflow at hook 2 [ 493.582154][T17909] bond1: invalid ARP target 0.0.0.0 specified for addition [ 493.615670][T17909] bond1: option arp_ip_target: invalid value (0) [ 493.660347][T17909] bond1 (unregistering): Released all slaves [ 493.768435][T17922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3225'. [ 493.771257][ T5148] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 493.792082][ T5148] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 493.807290][ T5148] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 493.821024][ T5148] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 493.837224][ T5148] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 493.985863][T17917] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.080211][T17922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.092540][T17922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.131874][T17922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.154757][T17922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.285818][T17917] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.416818][T17917] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.487474][ T5909] IPVS: starting estimator thread 0... [ 494.543088][T17917] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.588228][T17950] IPVS: using max 28 ests per chain, 67200 per kthread [ 494.798592][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.853005][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.908527][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.015298][ T140] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.067693][T17923] lo speed is unknown, defaulting to 1000 [ 495.166405][T17969] syzkaller0: entered promiscuous mode [ 495.172024][T17969] syzkaller0: entered allmulticast mode [ 495.920247][ T5148] Bluetooth: hci5: command tx timeout [ 497.275617][T18008] net_ratelimit: 5379 callbacks suppressed [ 497.275637][T18008] bridge_slave_0: mtu less than device minimum [ 497.322556][T18008] dvmrp0: entered allmulticast mode [ 497.551799][T18024] 8021q: VLANs not supported on ip_vti0 [ 497.558621][T18024] x_tables: duplicate entry at hook 2 [ 497.566653][T18016] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3247'. [ 497.650184][T17923] chnl_net:caif_netlink_parms(): no params data found [ 497.741746][T18030] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3249'. [ 497.762285][T17976] lo speed is unknown, defaulting to 1000 [ 497.968683][T17923] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.978969][T17923] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.989250][T17923] bridge_slave_0: entered allmulticast mode [ 498.002137][T17923] bridge_slave_0: entered promiscuous mode [ 498.014245][ T5148] Bluetooth: hci5: command 0x041b tx timeout [ 498.015296][T17923] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.029150][T17923] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.036882][T17923] bridge_slave_1: entered allmulticast mode [ 498.045102][T17923] bridge_slave_1: entered promiscuous mode [ 498.184421][T17923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.220316][T17923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.390920][T17923] team0: Port device team_slave_0 added [ 498.444588][T17923] team0: Port device team_slave_1 added [ 498.634191][T17923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.652141][T17923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.681260][T17923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.699413][T17923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.712346][T17923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.743016][T17923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.989811][T18067] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3260'. [ 499.016963][T18072] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3261'. [ 499.021329][T18065] netlink: 'syz.4.3259': attribute type 1 has an invalid length. [ 499.026512][T18072] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3261'. [ 499.048836][T18067] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3260'. [ 499.059144][T18072] netlink: 'syz.0.3261': attribute type 6 has an invalid length. [ 499.066366][T18065] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3259'. [ 499.074877][T18072] netlink: 'syz.0.3261': attribute type 5 has an invalid length. [ 499.086821][T18065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3259'. [ 499.105516][T17923] hsr_slave_0: entered promiscuous mode [ 499.119827][T17923] hsr_slave_1: entered promiscuous mode [ 499.127000][T18072] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3261'. [ 499.127910][T17923] debugfs: 'hsr0' already exists in 'hsr' [ 499.142827][T17923] Cannot create hsr debugfs directory [ 499.331919][T18087] netlink: 'syz.1.3264': attribute type 10 has an invalid length. [ 499.351457][T18087] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3264'. [ 499.404794][T18087] dummy0: entered promiscuous mode [ 499.419453][T18087] bridge0: port 3(dummy0) entered blocking state [ 499.426093][T18087] bridge0: port 3(dummy0) entered disabled state [ 499.434206][T18087] dummy0: entered allmulticast mode [ 499.459311][T18087] bridge0: port 3(dummy0) entered blocking state [ 499.465860][T18087] bridge0: port 3(dummy0) entered forwarding state [ 499.681908][T18101] tipc: Started in network mode [ 499.689215][T18101] tipc: Node identity 2242d17e5a0a, cluster identity 4711 [ 499.698212][T18101] tipc: Enabled bearer , priority 0 [ 499.742083][T18101] syzkaller0: entered promiscuous mode [ 499.752321][T18101] syzkaller0: entered allmulticast mode [ 499.804312][T18112] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.925775][T18112] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.968543][T18118] tipc: Resetting bearer [ 499.981492][T18100] tipc: Resetting bearer [ 500.014646][T18100] tipc: Disabling bearer [ 500.063004][T18112] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.077370][ T5148] Bluetooth: hci5: command 0x041b tx timeout [ 500.293014][T18112] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.480689][T18140] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 500.525046][T18140] netlink: 'syz.0.3279': attribute type 8 has an invalid length. [ 500.608274][T17923] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 500.631482][ T4379] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.662069][T17923] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 500.675368][T17923] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 500.793972][T17923] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 500.820060][ T5909] IPVS: starting estimator thread 0... [ 500.846098][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.864791][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.915684][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.917319][T18158] IPVS: using max 26 ests per chain, 62400 per kthread [ 500.982732][T18168] netlink: 'syz.3.3285': attribute type 10 has an invalid length. [ 501.042186][T18177] Bluetooth: MGMT ver 1.23 [ 501.050314][T18177] netlink: 'syz.1.3286': attribute type 2 has an invalid length. [ 501.102648][T18168] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 501.343938][T17923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.460973][T17923] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.492978][ T4379] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.500330][ T4379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.545987][ T4379] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.553341][ T4379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.615613][T18204] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 501.666510][ T875] IPVS: starting estimator thread 0... [ 501.776632][T18210] IPVS: using max 24 ests per chain, 57600 per kthread [ 501.815256][T17923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 502.169478][ T52] Bluetooth: hci5: command 0x041b tx timeout [ 502.176078][T15907] IPVS: starting estimator thread 0... [ 502.194314][T18228] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 502.276885][T18232] IPVS: using max 25 ests per chain, 60000 per kthread [ 502.713803][T17923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.911786][T18261] __nla_validate_parse: 11 callbacks suppressed [ 502.911807][T18261] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3307'. [ 503.031265][T17923] veth0_vlan: entered promiscuous mode [ 503.044187][T18265] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3307'. [ 503.075591][T17923] veth1_vlan: entered promiscuous mode [ 503.173709][T17923] veth0_macvtap: entered promiscuous mode [ 503.202395][T17923] veth1_macvtap: entered promiscuous mode [ 503.285904][T18275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3309'. [ 503.308316][T17923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.318841][T18276] netlink: 'syz.1.3310': attribute type 2 has an invalid length. [ 503.350942][T18276] netlink: 'syz.1.3310': attribute type 2 has an invalid length. [ 503.358535][T18275] syzkaller1: entered promiscuous mode [ 503.381860][T18275] syzkaller1: entered allmulticast mode [ 503.403561][T17923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.421405][T18276] netlink: 'syz.1.3310': attribute type 2 has an invalid length. [ 503.593685][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.612837][T18282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3311'. [ 503.620291][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.664754][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.684400][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.870484][T18289] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3314'. [ 503.890049][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.911997][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.021906][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.038008][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.238777][ T52] Bluetooth: hci5: command 0x041b tx timeout [ 504.813930][T18322] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3323'. [ 505.167653][T18346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3328'. [ 505.473857][T18350] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 505.813517][T18366] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 505.833546][T18366] bond2 (unregistering): Released all slaves [ 505.993103][T18383] netlink: zone id is out of range [ 506.015930][T18383] netlink: zone id is out of range [ 506.032806][T18383] netlink: zone id is out of range [ 506.043934][T18383] netlink: get zone limit has 4 unknown bytes [ 506.285875][T18396] netlink: 'syz.1.3345': attribute type 11 has an invalid length. [ 506.616605][T18412] validate_nla: 1 callbacks suppressed [ 506.616625][T18412] netlink: 'syz.1.3349': attribute type 3 has an invalid length. [ 506.768484][T18426] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3351'. [ 507.002102][T18431] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3353'. [ 507.011749][T18431] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3353'. [ 507.488930][T18451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.017145][T18489] __nla_validate_parse: 5 callbacks suppressed [ 508.017166][T18489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3368'. [ 508.086874][T18489] netlink: 'syz.2.3368': attribute type 1 has an invalid length. [ 508.148794][T18499] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3368'. [ 508.287400][T18501] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 508.389431][T18509] netlink: 'syz.3.3376': attribute type 12 has an invalid length. [ 508.421697][T18509] netlink: 'syz.3.3376': attribute type 1 has an invalid length. [ 508.526542][T18521] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 508.538274][T18521] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 508.667558][T18524] bond2: (slave gretap1): making interface the new active one [ 508.677079][T18524] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 508.829329][T18531] xt_hashlimit: size too large, truncated to 1048576 [ 509.247204][T18556] syzkaller0: entered promiscuous mode [ 509.252880][T18556] syzkaller0: entered allmulticast mode [ 509.465620][T18575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3392'. [ 509.553768][T18575] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3392'. [ 509.604484][T18575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3392'. [ 509.629565][T18587] netlink: 'syz.4.3393': attribute type 2 has an invalid length. [ 509.857333][T18599] netlink: 'syz.1.3397': attribute type 21 has an invalid length. [ 509.890315][T18599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3397'. [ 509.894909][T18597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3396'. [ 509.926135][T18597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3396'. [ 509.948850][T18602] syzkaller0: entered promiscuous mode [ 509.956096][T18602] syzkaller0: entered allmulticast mode [ 509.972202][T18599] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 510.260587][T18617] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 510.289158][T18616] bridge_slave_0: left allmulticast mode [ 510.294934][T18616] bridge_slave_0: left promiscuous mode [ 510.301698][T18616] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.324112][T18616] bridge_slave_1: left allmulticast mode [ 510.338004][T18616] bridge_slave_1: left promiscuous mode [ 510.351427][T18616] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.472980][T18616] bond0: (slave bond_slave_0): Releasing backup interface [ 510.499640][T18636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3406'. [ 510.514413][T18634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3408'. [ 510.538771][T18616] bond0: (slave bond_slave_1): Releasing backup interface [ 510.582978][T18634] x_tables: unsorted entry at hook 3 [ 510.600419][T18616] team0: Port device team_slave_0 removed [ 510.641646][T18616] team0: Port device team_slave_1 removed [ 510.658594][T18616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.676595][T18616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.694264][T18616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.710926][T18616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.744244][T18616] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 511.150009][T18650] netlink: 'syz.0.3412': attribute type 1 has an invalid length. [ 511.651933][T18683] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 512.290062][T18716] netlink: 'syz.3.3432': attribute type 1 has an invalid length. [ 512.334255][T18716] netlink: 'syz.3.3432': attribute type 1 has an invalid length. [ 512.364366][T18716] netlink: 'syz.3.3432': attribute type 1 has an invalid length. [ 512.377079][T18716] netlink: 'syz.3.3432': attribute type 1 has an invalid length. [ 512.397568][T18716] netlink: 'syz.3.3432': attribute type 1 has an invalid length. [ 512.424927][T18716] netlink: 'syz.3.3432': attribute type 1 has an invalid length. [ 512.433872][T18716] netlink: 'syz.3.3432': attribute type 1 has an invalid length. [ 512.448937][T18716] netlink: 'syz.3.3432': attribute type 1 has an invalid length. [ 512.457930][T18716] netlink: 'syz.3.3432': attribute type 1 has an invalid length. [ 512.493429][T18716] netlink: 'syz.3.3432': attribute type 1 has an invalid length. [ 512.934810][T18745] IPv6: sit1: Disabled Multicast RS [ 512.953244][T18745] sit1: entered allmulticast mode [ 513.072771][T18754] __nla_validate_parse: 11 callbacks suppressed [ 513.072794][T18754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3444'. [ 513.098007][T18754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3444'. [ 513.131379][T18754] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 513.217640][T18754] Unsupported ieee802154 address type: 0 [ 513.900305][T18774] : entered promiscuous mode [ 514.788223][T18831] netlink: zone id is out of range [ 514.793537][T18831] netlink: zone id is out of range [ 514.806561][T18831] netlink: zone id is out of range [ 514.811748][T18831] netlink: get zone limit has 4 unknown bytes [ 514.863623][T18835] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 514.877669][T18835] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3463'. [ 514.904135][T18837] openvswitch: netlink: Key type 234 is out of range max 32 [ 514.920000][T18838] openvswitch: netlink: Key type 234 is out of range max 32 [ 514.984862][T18841] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3468'. [ 515.001307][T18843] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3469'. [ 515.149218][T18848] net veth1_virt_wifi .: renamed from virt_wifi0 [ 515.262404][T18854] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3473'. [ 515.352178][T18860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3474'. [ 515.491028][T18863] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3474'. [ 515.528373][T18860] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3474'. [ 515.545902][T18867] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3476'. [ 517.715360][T18948] xt_CONNSECMARK: invalid mode: 0 [ 518.999274][T18967] __nla_validate_parse: 2 callbacks suppressed [ 518.999295][T18967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3498'. [ 519.132037][T18979] validate_nla: 28 callbacks suppressed [ 519.132056][T18979] netlink: 'syz.0.3502': attribute type 9 has an invalid length. [ 519.331702][T18991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3505'. [ 519.394085][T18991] SET target dimension over the limit! [ 519.403578][T18991] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3505'. [ 519.935816][T19027] v: renamed from vlan0 (while UP) [ 519.977667][T19027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3515'. [ 519.991869][T19032] netlink: 'syz.3.3517': attribute type 29 has an invalid length. [ 520.013037][T19025] xt_hashlimit: size too large, truncated to 1048576 [ 520.032777][T19032] Bluetooth: MGMT ver 1.23 [ 520.047114][T19032] netlink: 'syz.3.3517': attribute type 29 has an invalid length. [ 520.253904][T19044] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.285119][T19044] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.361705][T19049] netlink: 'syz.4.3519': attribute type 16 has an invalid length. [ 520.434511][T19049] netlink: 'syz.4.3519': attribute type 17 has an invalid length. [ 520.586116][T19056] netlink: 'syz.3.3523': attribute type 4 has an invalid length. [ 520.631759][T19049] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 520.721561][T19058] sch_fq: defrate 0 ignored. [ 520.846927][T19064] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3527'. [ 520.909045][T19064] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3527'. [ 521.064524][T19073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3530'. [ 521.505412][T19084] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3533'. [ 521.632774][T19091] x_tables: duplicate underflow at hook 3 [ 521.781368][T19100] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3539'. [ 521.897430][T19100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3539'. [ 521.949425][T19113] : entered promiscuous mode [ 521.971242][T19113] netlink: 'syz.3.3543': attribute type 1 has an invalid length. [ 522.150455][T19113] 8021q: adding VLAN 0 to HW filter on device bond3 [ 522.193301][T19118] veth5: entered promiscuous mode [ 522.212096][T19118] bond3: (slave veth5): Enslaving as an active interface with an up link [ 522.352518][T19131] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 522.620240][T19155] netlink: 'syz.3.3555': attribute type 30 has an invalid length. [ 522.633183][T19154] netlink: 'syz.4.3556': attribute type 1 has an invalid length. [ 522.762315][T19161] nbd: couldn't find device at index 61440 [ 522.891115][T19170] netlink: 'syz.1.3560': attribute type 83 has an invalid length. [ 523.153995][T19181] xt_cgroup: invalid path, errno=-2 [ 523.220053][T19184] bond0: entered promiscuous mode [ 523.225157][T19184] bond_slave_0: entered promiscuous mode [ 523.231637][T19184] bond_slave_1: entered promiscuous mode [ 523.242330][T19184] batadv0: entered promiscuous mode [ 523.251187][T19184] debugfs: 'hsr1' already exists in 'hsr' [ 523.257807][T19184] Cannot create hsr debugfs directory [ 523.264176][T19184] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 523.287846][T19190] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 523.332849][T19187] bond2: entered promiscuous mode [ 523.339231][T19187] bond2: entered allmulticast mode [ 523.344972][T19187] 8021q: adding VLAN 0 to HW filter on device bond2 [ 523.434324][T19185] dvmrp0: entered allmulticast mode [ 523.459730][T19185] dvmrp0: left allmulticast mode [ 523.730153][T19204] openvswitch: netlink: Flow key attribute not present in set flow. [ 523.791080][T19212] openvswitch: netlink: Flow key attribute not present in set flow. [ 524.095171][T19233] openvswitch: netlink: Flow key attribute not present in set flow. [ 524.269152][T19247] __nla_validate_parse: 23 callbacks suppressed [ 524.269174][T19247] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3584'. [ 524.383665][T19251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3585'. [ 524.508056][T19259] validate_nla: 1 callbacks suppressed [ 524.508077][T19259] netlink: 'syz.0.3588': attribute type 4 has an invalid length. [ 524.545099][T19259] netlink: 'syz.0.3588': attribute type 4 has an invalid length. [ 524.923527][T19273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3591'. [ 524.993380][T19273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3591'. [ 525.010591][T19280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3593'. [ 525.086519][T19285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3591'. [ 525.274529][T19294] netlink: 'syz.2.3598': attribute type 1 has an invalid length. [ 525.423549][T19300] vlan2: entered allmulticast mode [ 525.429280][T19300] hsr0: entered allmulticast mode [ 525.431793][T19307] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3601'. [ 525.434409][T19300] hsr_slave_0: entered allmulticast mode [ 525.453976][T19300] hsr_slave_1: entered allmulticast mode [ 525.495482][T19294] bond1: (slave gretap1): making interface the new active one [ 525.508767][T19294] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 525.791145][T19330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3601'. [ 525.937517][T19337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3606'. [ 525.948055][T19337] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3606'. [ 526.043996][T19341] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 526.498940][T19358] IPv6: sit1: Disabled Multicast RS [ 526.734339][T19374] netlink: 'syz.0.3618': attribute type 3 has an invalid length. [ 527.212579][T15921] hid-generic 0005:0C45:1010.0002: unknown main item tag 0x1 [ 527.227162][T15921] hid-generic 0005:0C45:1010.0002: ignoring exceeding usage max [ 527.237457][T15921] hid-generic 0005:0C45:1010.0002: unknown main item tag 0x4 [ 527.244894][T15921] hid-generic 0005:0C45:1010.0002: unknown main item tag 0x5 [ 527.253706][T15921] hid-generic 0005:0C45:1010.0002: reserved main item tag 0xd [ 527.272026][T15921] hid-generic 0005:0C45:1010.0002: hidraw0: BLUETOOTH HID v0.c3 Device [syz1] on aa:aa:aa:aa:aa:aa [ 527.414012][T19413] : entered promiscuous mode [ 527.833727][T19440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.001483][ T52] Bluetooth: hci5: command 0x041b tx timeout [ 528.652317][T19477] bridge_slave_0: default FDB implementation only supports local addresses [ 528.872737][T19485] 8021q: adding VLAN 0 to HW filter on device bond1 [ 528.885244][T19481] tipc: Enabled bearer , priority 13 [ 529.155043][T19498] x_tables: duplicate underflow at hook 2 [ 529.187738][T19498] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20003 [ 529.207227][T19498] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20000 [ 529.255235][T19503] IPv6: NLM_F_REPLACE set, but no existing node found! [ 529.665901][T19530] gtp0: entered promiscuous mode [ 529.695154][T19530] gtp0: entered allmulticast mode [ 529.877454][ T5909] tipc: Node number set to 3001320986 [ 530.053101][T19551] __nla_validate_parse: 13 callbacks suppressed [ 530.053122][T19551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3670'. [ 530.077338][ T52] Bluetooth: hci5: command 0x041b tx timeout [ 530.429571][T19564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3675'. [ 530.810770][T19581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3680'. [ 530.896546][T19585] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3683'. [ 530.916524][T19585] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3683'. [ 530.936067][T19585] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3683'. [ 530.954692][T19589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3684'. [ 531.111543][T19595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3686'. [ 531.265665][T19603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3689'. [ 531.291016][T19606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3689'. [ 531.439683][T19613] netlink: 'syz.1.3692': attribute type 4 has an invalid length. [ 531.664127][T19625] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_1, syncid = 1, id = 0 [ 531.717560][T19627] netem: invalid attributes len -24 [ 531.722826][T19627] netem: change failed [ 531.911190][T19635] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 531.925938][T19635] bond2 (unregistering): Released all slaves [ 532.190333][T19610] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 532.196656][T19610] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 532.363607][T19610] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 532.395985][T19610] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 532.415725][ T71] bridge_slave_0: left allmulticast mode [ 532.437493][ T71] bridge_slave_0: left promiscuous mode [ 532.475163][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.930637][ T71] bond7 (unregistering): (slave ip6gretap1): Releasing backup interface [ 532.942607][ T71] bond7 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - ea:76:20:48:af:60 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 533.304047][ T71] dvmrp6 (unregistering): left allmulticast mode [ 533.330173][ T71] bond1 (unregistering): (slave geneve2): Releasing active interface [ 533.387631][ T71] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 533.664853][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.677114][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.689851][ T71] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 533.702976][ T71] bond0 (unregistering): Released all slaves [ 533.815463][ T71] bond1 (unregistering): Released all slaves [ 533.925597][ T71] bond2 (unregistering): Released all slaves [ 533.942088][ T71] bond3 (unregistering): Released all slaves [ 534.055071][ T71] bond4 (unregistering): (slave veth11): Releasing active interface [ 534.065765][ T71] bond4 (unregistering): (slave veth13): Releasing active interface [ 534.078084][ T71] bond4 (unregistering): Released all slaves [ 534.091658][ T71] bond5 (unregistering): Released all slaves [ 534.205230][ T71] bond6 (unregistering): Released all slaves [ 534.221502][ T71] bond7 (unregistering): (slave veth17): Releasing backup interface [ 534.232198][ T71] bond7 (unregistering): Released all slaves [ 534.367758][ T71] bond8 (unregistering): Released all slaves [ 534.382943][ T71] bond9 (unregistering): Released all slaves [ 534.399109][ T71] bond10 (unregistering): Released all slaves [ 534.510813][ T71] bond11 (unregistering): Released all slaves [ 534.874002][T19702] netlink: 'syz.3.3715': attribute type 6 has an invalid length. [ 534.919845][ T71] tipc: Disabling bearer [ 534.952004][ T71] tipc: Left network mode [ 535.057648][T19705] __nla_validate_parse: 3 callbacks suppressed [ 535.057669][T19705] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3716'. [ 535.075625][T19610] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 535.085172][T19610] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 535.202828][T19711] netlink: 208 bytes leftover after parsing attributes in process `syz.3.3718'. [ 535.290785][T19713] batadv_slave_1: entered promiscuous mode [ 535.399469][T19610] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 535.411975][T19713] batadv_slave_1: left promiscuous mode [ 535.422096][T19610] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 535.597544][T19610] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 535.625108][T19610] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 535.795870][T19738] netlink: 'syz.3.3723': attribute type 1 has an invalid length. [ 536.017812][T19740] bond4: (slave geneve2): making interface the new active one [ 536.071276][T19740] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 536.135966][ T36] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 536.155203][ T36] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 536.260403][T19760] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3727'. [ 536.282464][ T36] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 536.299504][T19760] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3727'. [ 536.322964][ T36] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 536.351578][T19766] netlink: 'syz.0.3727': attribute type 6 has an invalid length. [ 536.820942][T19787] dvmrp6: entered allmulticast mode [ 536.933854][T19800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3735'. [ 536.945254][T19800] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 536.952563][T19800] IPv6: NLM_F_CREATE should be set when creating new route [ 536.959887][T19800] IPv6: NLM_F_CREATE should be set when creating new route [ 536.967180][T19800] IPv6: NLM_F_CREATE should be set when creating new route [ 537.021150][T19808] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 537.068124][T19803] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 537.579664][T19829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3743'. [ 537.745289][ T71] hsr_slave_0: left promiscuous mode [ 537.797954][ T71] hsr_slave_1: left promiscuous mode [ 537.817285][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.824765][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.908491][ T71] veth0_macvtap: left promiscuous mode [ 538.341399][ T71] pimreg (unregistering): left allmulticast mode [ 539.428990][ T71] lo (unregistering): left allmulticast mode [ 539.501389][T19859] syz_tun: entered allmulticast mode [ 539.536907][T19874] syzkaller1: entered promiscuous mode [ 539.576441][T19874] syzkaller1: entered allmulticast mode [ 539.769421][T19903] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3756'. [ 539.982048][T19908] netlink: 'syz.0.3757': attribute type 83 has an invalid length. [ 539.993774][T19908] netlink: 'syz.0.3757': attribute type 11 has an invalid length. [ 540.016583][T19908] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3757'. [ 540.331233][ T71] IPVS: stop unused estimator thread 0... [ 540.346768][T19926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.361494][T19926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.453676][T19929] veth0_to_team: entered promiscuous mode [ 540.589753][ T71] team0: left allmulticast mode [ 540.595329][ T71] team_slave_0: left allmulticast mode [ 540.606503][ T71] team_slave_1: left allmulticast mode [ 540.612028][ T71] dummy0: left allmulticast mode [ 540.630361][ T71] team0: left promiscuous mode [ 540.635187][ T71] team_slave_0: left promiscuous mode [ 540.659537][ T71] team_slave_1: left promiscuous mode [ 540.668497][ T71] dummy0: left promiscuous mode [ 540.673839][ T71] bridge0: port 3(team0) entered disabled state [ 540.698551][ T71] bridge_slave_1: left allmulticast mode [ 540.710708][ T71] bridge_slave_1: left promiscuous mode [ 540.717744][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.735382][ T71] bridge_slave_0: left allmulticast mode [ 540.746596][ T71] bridge_slave_0: left promiscuous mode [ 540.765492][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.787824][T19951] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 540.943008][T19962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3768'. [ 541.004393][T19965] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3768'. [ 541.088568][T19970] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 541.261095][T19982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3777'. [ 541.270588][T19982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3777'. [ 541.412492][ T71] bond4 (unregistering): (slave geneve2): Releasing active interface [ 541.478704][ T71] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 541.880571][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.895701][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.908101][ T71] bond0 (unregistering): Released all slaves [ 541.927645][ T71] bond1 (unregistering): Released all slaves [ 541.943497][ T71] bond2 (unregistering): (slave bond3): Releasing backup interface [ 541.952238][ T71] bond2 (unregistering): Released all slaves [ 542.061959][ T71] bond3 (unregistering): Released all slaves [ 542.167510][ T71] bond4 (unregistering): Released all slaves [ 542.181773][ T71] bond5 (unregistering): Released all slaves [ 542.289299][ T71] bond6 (unregistering): Released all slaves [ 542.395714][ T71] bond7 (unregistering): (slave veth9): Releasing active interface [ 542.408296][ T71] bond7 (unregistering): Released all slaves [ 542.423711][T19941] syzkaller0: entered promiscuous mode [ 542.429677][T19941] syzkaller0: entered allmulticast mode [ 542.450692][T19962] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 542.468234][T19962] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3768'. [ 542.715353][ T71] tipc: Left network mode [ 542.717207][T19985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3778'. [ 542.871180][T19996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.881844][T19994] geneve2: entered promiscuous mode [ 542.890799][T19994] geneve2: entered allmulticast mode [ 542.921168][ T140] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 542.936264][ T140] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 542.965826][ T140] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 543.046232][ T140] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 543.111814][T20005] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3784'. [ 543.162612][T20005] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3784'. [ 543.173741][T20005] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3784'. [ 543.232780][T20013] ip6gre1: entered allmulticast mode [ 543.244415][T20006] batman_adv: batadv0: Adding interface: dummy0 [ 543.251044][T20006] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.277673][T20006] batman_adv: batadv0: Interface activated: dummy0 [ 543.348285][T20005] batadv0: mtu less than device minimum [ 543.374231][T20005] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 543.386858][T20005] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 543.399070][T20005] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 543.411331][T20005] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 543.423485][T20005] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 543.435559][T20005] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 543.447681][T20005] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 543.454396][T20028] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3790'. [ 543.597960][T20035] netlink: 'syz.2.3789': attribute type 4 has an invalid length. [ 543.664964][T20035] netlink: 'syz.2.3789': attribute type 4 has an invalid length. [ 543.796118][T20041] tipc: Started in network mode [ 543.815613][T20041] tipc: Node identity bad4baca2d0d, cluster identity 4711 [ 543.835998][T20041] tipc: Enabled bearer , priority 0 [ 543.887058][T20041] syzkaller0: entered promiscuous mode [ 543.915714][T20041] syzkaller0: entered allmulticast mode [ 544.054570][T20041] tipc: Resetting bearer [ 544.178302][T20040] tipc: Resetting bearer [ 544.258439][T20040] tipc: Disabling bearer [ 544.731746][T20085] netlink: 'syz.0.3804': attribute type 1 has an invalid length. [ 544.760606][T20081] team_slave_0: entered promiscuous mode [ 544.766687][T20081] team_slave_1: entered promiscuous mode [ 544.809809][T20081] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 544.829161][T20081] team0: Device macvtap1 is already an upper device of the team interface [ 544.889755][T20081] team_slave_0: left promiscuous mode [ 544.895306][T20081] team_slave_1: left promiscuous mode [ 544.971491][T20084] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 545.042108][ T71] hsr_slave_0: left promiscuous mode [ 545.070166][ T71] hsr_slave_1: left promiscuous mode [ 545.186109][ T71] veth0_macvtap: left promiscuous mode [ 545.679416][ T71] team0 (unregistering): Port device team_slave_1 removed [ 545.723219][ T71] team0 (unregistering): Port device team_slave_0 removed [ 545.999306][ T71] team0 (unregistering): Port device dummy0 removed [ 546.048259][T20085] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 546.061616][T20096] team0: Device gtp1 is of different type [ 546.153816][T20099] veth3: entered promiscuous mode [ 546.198252][T20104] veth3: entered promiscuous mode [ 546.223630][T20108] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 546.341497][T20121] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.368682][T20118] __nla_validate_parse: 4 callbacks suppressed [ 546.368701][T20118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3810'. [ 546.395269][T20121] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 546.420964][T20126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3810'. [ 546.469067][T20128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3813'. [ 546.595577][ T71] IPVS: stop unused estimator thread 0... [ 546.858444][T20152] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3819'. [ 546.875166][T20152] net_ratelimit: 12 callbacks suppressed [ 546.875186][T20152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 546.922678][T20151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3816'. [ 547.234958][T20170] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3822'. [ 547.501115][T20185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3825'. [ 548.190933][T20224] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 548.320009][T20230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3836'. [ 548.665375][T20246] xfrm1: entered allmulticast mode [ 548.729372][T20248] tipc: Enabled bearer , priority 0 [ 548.758311][T20248] syzkaller0: entered promiscuous mode [ 548.763615][T20250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 548.774842][T20248] syzkaller0: entered allmulticast mode [ 548.903625][T20252] netlink: 'syz.0.3845': attribute type 2 has an invalid length. [ 549.047383][T20256] tipc: Resetting bearer [ 549.101537][T20247] tipc: Resetting bearer [ 549.159927][T20247] tipc: Disabling bearer [ 549.208047][T20263] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3848'. [ 549.250414][T20268] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 549.356814][T20277] ip6t_rpfilter: unknown options [ 549.380369][T20268] xt_CT: No such helper "snmp_trap" [ 549.396017][T20270] dummy0: entered allmulticast mode [ 549.466718][T20284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3853'. [ 549.508262][T20284] netlink: 'syz.3.3853': attribute type 21 has an invalid length. [ 549.887926][T20311] syzkaller0: entered promiscuous mode [ 549.936423][T20311] syzkaller0: entered allmulticast mode [ 550.291559][T20336] netlink: 'syz.3.3867': attribute type 3 has an invalid length. [ 550.951240][T20376] team0: Cannot enslave team device to itself [ 551.218171][T20386] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 551.242567][T20386] bond2 (unregistering): Released all slaves [ 551.248338][T20389] nbd3: detected capacity change from 0 to 63 [ 551.288566][T20392] block nbd2: NBD_DISCONNECT [ 551.305128][T20392] block nbd2: Send disconnect failed -32 [ 551.317083][T20392] block nbd2: shutting down sockets [ 551.409433][T20401] __nla_validate_parse: 2 callbacks suppressed [ 551.409451][T20401] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3884'. [ 551.464937][T20402] netlink: 'syz.1.3885': attribute type 2 has an invalid length. [ 551.581590][ T5148] block nbd3: Receive control failed (result -104) [ 551.642165][T20409] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 551.670692][T20409] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3886'. [ 551.759953][T20416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3890'. [ 551.971963][T20430] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3893'. [ 551.991700][T20434] netlink: 'syz.0.3894': attribute type 4 has an invalid length. [ 552.082315][T20434] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3894'. [ 552.590101][T20461] netlink: 'syz.2.3902': attribute type 23 has an invalid length. [ 552.698765][T20467] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 552.780583][T20471] netlink: 'syz.2.3902': attribute type 1 has an invalid length. [ 552.797125][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 553.003456][T20473] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.3905'. [ 553.046945][T20473] openvswitch: netlink: Missing key (keys=40, expected=100) [ 553.063630][T20487] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3908'. [ 553.215446][T20490] netlink: 'syz.0.3909': attribute type 28 has an invalid length. [ 553.223550][T20490] netlink: 'syz.0.3909': attribute type 3 has an invalid length. [ 553.231859][T20490] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3909'. [ 553.255441][T20493] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3910'. [ 553.260083][T20490] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 553.403871][T20500] pimreg: entered allmulticast mode [ 553.421468][T20501] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.3912'. [ 553.657713][T20518] netlink: 'syz.0.3916': attribute type 1 has an invalid length. [ 553.692800][T20518] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 554.212562][T20547] validate_nla: 2 callbacks suppressed [ 554.212584][T20547] netlink: 'syz.0.3922': attribute type 6 has an invalid length. [ 554.249718][T20547] netlink: 'syz.0.3922': attribute type 5 has an invalid length. [ 554.342467][T20519] team0 (unregistering): Port device team_slave_0 removed [ 554.366778][T20519] team0 (unregistering): Port device team_slave_1 removed [ 554.647539][T20559] netlink: 'syz.0.3923': attribute type 10 has an invalid length. [ 554.670762][T20559] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.678688][T20559] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.729800][T20559] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.737104][T20559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.744760][T20559] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.752007][T20559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.787358][T20559] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 554.888280][T20571] Bluetooth: MGMT ver 1.23 [ 555.081777][T20582] gretap0: entered promiscuous mode [ 555.107972][T20582] vlan2: entered promiscuous mode [ 555.115885][T20592] netlink: 'syz.1.3928': attribute type 9 has an invalid length. [ 555.292773][T20596] netlink: 'syz.0.3932': attribute type 9 has an invalid length. [ 555.761451][T20626] x_tables: ip_tables: CONNSECMARK.0 target: invalid size 8 (kernel) != (user) 160 [ 555.846633][T20627] x_tables: duplicate underflow at hook 1 [ 556.013832][T20620] x_tables: ip_tables: CONNSECMARK.0 target: invalid size 8 (kernel) != (user) 160 [ 556.484250][T20647] openvswitch: netlink: IP tunnel dst address not specified [ 556.511682][T20653] netlink: 'syz.4.3947': attribute type 1 has an invalid length. [ 556.675511][T20653] bond3: (slave bridge4): making interface the new active one [ 556.684934][T20653] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 556.747911][T20669] __nla_validate_parse: 9 callbacks suppressed [ 556.747931][T20669] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3950'. [ 556.862388][T20669] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3950'. [ 556.883072][T20669] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3950'. [ 556.895557][T20669] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3950'. [ 556.907331][T20669] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3950'. [ 556.967402][T20677] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 556.996796][T20662] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3947'. [ 557.362434][T20699] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3957'. [ 557.445460][T20705] netem: change failed [ 557.599895][T20712] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3957'. [ 557.825292][T20711] bond4: entered allmulticast mode [ 557.849096][T20711] 8021q: adding VLAN 0 to HW filter on device bond4 [ 557.861177][T20711] bridge0: port 3(bond4) entered blocking state [ 557.868033][T20711] bridge0: port 3(bond4) entered disabled state [ 557.892299][T20711] bond4: entered promiscuous mode [ 557.908387][T20711] bridge0: port 3(bond4) entered blocking state [ 557.915065][T20711] bridge0: port 3(bond4) entered forwarding state [ 558.082567][ T71] bridge0: port 3(bond4) entered disabled state [ 558.135719][T20725] tipc: Enabled bearer , priority 0 [ 558.183750][T20722] syzkaller0: entered promiscuous mode [ 558.195682][T20722] syzkaller0: entered allmulticast mode [ 558.236919][T20722] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 558.264535][T20741] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3964'. [ 558.284154][T20741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3964'. [ 558.324835][T20741] netlink: 'syz.1.3964': attribute type 2 has an invalid length. [ 558.412685][T20727] tipc: Resetting bearer [ 558.440139][T20721] tipc: Resetting bearer [ 558.512998][T20721] tipc: Disabling bearer [ 559.149389][T20793] netlink: 'syz.1.3976': attribute type 21 has an invalid length. [ 559.173138][T20793] netlink: 'syz.1.3976': attribute type 4 has an invalid length. [ 559.195409][T20793] netlink: 'syz.1.3976': attribute type 5 has an invalid length. [ 559.585608][T20817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.722867][T20871] x_tables: duplicate underflow at hook 1 [ 561.011147][T20897] validate_nla: 3 callbacks suppressed [ 561.011166][T20897] netlink: 'syz.2.4003': attribute type 29 has an invalid length. [ 561.048028][T20897] netlink: 'syz.2.4003': attribute type 29 has an invalid length. [ 561.073255][T20902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.344157][T20913] Unsupported ieee802154 address type: 0 [ 561.653464][ T5909] IPVS: starting estimator thread 0... [ 561.659051][T20943] netlink: 'syz.0.4014': attribute type 2 has an invalid length. [ 561.659072][T20943] netlink: 'syz.0.4014': attribute type 8 has an invalid length. [ 561.766515][T20941] IPVS: using max 23 ests per chain, 55200 per kthread [ 561.828644][T20953] hsr0 speed is unknown, defaulting to 1000 [ 561.845201][T20953] hsr0 speed is unknown, defaulting to 1000 [ 561.865387][T20953] hsr0 speed is unknown, defaulting to 1000 [ 561.955649][T20953] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 561.999920][T20965] __nla_validate_parse: 17 callbacks suppressed [ 561.999943][T20965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4024'. [ 562.022382][T20953] hsr0 speed is unknown, defaulting to 1000 [ 562.064414][T20953] hsr0 speed is unknown, defaulting to 1000 [ 562.074690][T20968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4023'. [ 562.085632][T20953] hsr0 speed is unknown, defaulting to 1000 [ 562.119742][T20953] hsr0 speed is unknown, defaulting to 1000 [ 562.129882][T20953] hsr0 speed is unknown, defaulting to 1000 [ 562.152292][T20953] hsr0 speed is unknown, defaulting to 1000 [ 562.178629][T20953] hsr0 speed is unknown, defaulting to 1000 [ 562.195169][T20953] hsr0 speed is unknown, defaulting to 1000 [ 562.369522][T20978] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.4028'. [ 562.390844][T20978] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 562.494766][T20985] Cannot find del_set index 1 as target [ 562.502157][T20985] Cannot find del_set index 1 as target [ 562.572489][T20989] xt_check_match: 14 callbacks suppressed [ 562.572510][T20989] x_tables: ip_tables: owner.1 match: invalid size 24 (kernel) != (user) 112 [ 562.698173][T20995] tipc: Started in network mode [ 562.703103][T20995] tipc: Node identity 969d9a80b931, cluster identity 4711 [ 562.727270][T20995] tipc: Enabled bearer , priority 0 [ 562.739986][T20996] tipc: Enabling of bearer rejected, already enabled [ 562.751223][T20995] syzkaller0: MTU too low for tipc bearer [ 562.757947][T20995] tipc: Disabling bearer [ 562.785999][T21001] syzkaller0: entered promiscuous mode [ 562.792029][T21001] syzkaller0: entered allmulticast mode [ 562.868996][T21007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4038'. [ 562.895348][T21007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4038'. [ 562.936817][T21009] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4040'. [ 562.962345][T21009] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4040'. [ 563.080056][T21009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4040'. [ 563.262934][T21026] : entered promiscuous mode [ 563.752595][T21065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4058'. [ 563.770413][T21060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4056'. [ 563.798737][T21061] bond2: Unable to set down delay as MII monitoring is disabled [ 563.812133][T21061] bond2 (unregistering): Released all slaves [ 563.878945][T21065] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 563.946360][T21074] IPv6: NLM_F_CREATE should be specified when creating new route [ 563.971186][T21074] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 563.978512][T21074] IPv6: NLM_F_CREATE should be set when creating new route [ 564.107152][T21080] netlink: 'syz.0.4062': attribute type 11 has an invalid length. [ 564.321296][T21093] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 564.612018][T21112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 564.668569][T21107] netlink: zone id is out of range [ 564.682181][T21107] netlink: zone id is out of range [ 564.688718][T21107] netlink: zone id is out of range [ 564.694426][T21107] netlink: get zone limit has 4 unknown bytes [ 564.765269][T21118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.777862][T21118] netlink: 'syz.2.4076': attribute type 1 has an invalid length. [ 564.790830][T21118] tipc: Started in network mode [ 564.795849][T21118] tipc: Node identity 5ef7ff5e3ecb, cluster identity 4711 [ 564.805023][T21118] tipc: Enabled bearer , priority 0 [ 564.814837][T21118] syzkaller0: entered promiscuous mode [ 564.821030][T21118] syzkaller0: entered allmulticast mode [ 564.846859][T21117] tipc: Resetting bearer [ 564.882269][T21117] tipc: Disabling bearer [ 565.241051][T21143] netlink: 'syz.0.4082': attribute type 1 has an invalid length. [ 565.636320][ T6029] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.657977][ T36] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.680791][ T36] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.703717][ T36] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.719391][T21167] tipc: Enabled bearer , priority 2 [ 565.744465][T21165] bond3: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 565.758581][T21165] bond3: entered promiscuous mode [ 565.763860][T21165] bond3: entered allmulticast mode [ 565.770400][T21165] 8021q: adding VLAN 0 to HW filter on device bond3 [ 566.140471][T21189] netlink: 'syz.2.4097': attribute type 1 has an invalid length. [ 566.403360][T21204] x_tables: duplicate underflow at hook 2 [ 566.587829][T21222] netlink: 'syz.1.4106': attribute type 3 has an invalid length. [ 566.841701][T21222] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.862165][ T875] tipc: Node number set to 2547628746 [ 566.911463][T21238] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 567.015831][T21246] 8021q: adding VLAN 0 to HW filter on device bond2 [ 567.088997][T21222] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.123223][T21246] x_tables: unsorted underflow at hook 2 [ 567.275197][T21222] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.445494][T21275] __nla_validate_parse: 14 callbacks suppressed [ 567.445516][T21275] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4118'. [ 567.462291][T21275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4118'. [ 567.478733][T21222] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.670820][ T140] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.689072][ T140] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.716046][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.752106][ T140] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.866992][T21291] tipc: Enabled bearer , priority 0 [ 567.874849][T21291] syzkaller0: entered promiscuous mode [ 567.880859][T21291] syzkaller0: entered allmulticast mode [ 567.904819][T21289] tipc: Resetting bearer [ 567.929422][T21289] tipc: Disabling bearer [ 568.080067][T21295] sctp: [Deprecated]: syz.3.4125 (pid 21295) Use of struct sctp_assoc_value in delayed_ack socket option. [ 568.080067][T21295] Use struct sctp_sack_info instead [ 568.098095][T21295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4125'. [ 568.107081][T21295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4125'. [ 568.131312][ T140] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.141313][ T140] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.151300][ T140] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.700498][T21302] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4127'. [ 568.809451][T21308] bridge0: port 3(dummy0) entered disabled state [ 568.816170][T21308] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.823978][T21308] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.869293][T21308] erspan0: entered allmulticast mode [ 568.928756][T21312] SET target dimension over the limit! [ 569.133516][T21323] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 569.892839][T21362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4135'. [ 569.914291][T21363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4135'. [ 569.925021][T21363] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 570.102476][T21375] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4138'. [ 571.102055][T21403] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4147'. [ 571.158753][ T36] tipc: Resetting bearer [ 571.434585][T21424] netlink: 'syz.3.4151': attribute type 1 has an invalid length. [ 571.461805][T21426] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4152'. [ 571.740984][T21437] warn_alloc: 1 callbacks suppressed [ 571.741021][T21437] syz.3.4155: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 571.770032][T21437] CPU: 0 UID: 0 PID: 21437 Comm: syz.3.4155 Not tainted syzkaller #0 PREEMPT(full) [ 571.770062][T21437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 571.770074][T21437] Call Trace: [ 571.770082][T21437] [ 571.770091][T21437] dump_stack_lvl+0x189/0x250 [ 571.770130][T21437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 571.770158][T21437] ? __pfx__printk+0x10/0x10 [ 571.770179][T21437] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 571.770207][T21437] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 571.770236][T21437] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 571.770266][T21437] warn_alloc+0x214/0x310 [ 571.770296][T21437] ? stack_depot_save_flags+0x40/0x860 [ 571.770332][T21437] ? __pfx_warn_alloc+0x10/0x10 [ 571.770363][T21437] ? kasan_save_track+0x3e/0x80 [ 571.770390][T21437] ? __kasan_kmalloc+0x93/0xb0 [ 571.770421][T21437] ? xsk_setsockopt+0x4dc/0x8d0 [ 571.770441][T21437] ? do_sock_setsockopt+0x17c/0x1b0 [ 571.770459][T21437] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 571.770477][T21437] ? do_syscall_64+0xfa/0xfa0 [ 571.770503][T21437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.770535][T21437] __vmalloc_node_range_noprof+0x125/0x12d0 [ 571.770602][T21437] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 571.770637][T21437] ? __kasan_kmalloc+0x93/0xb0 [ 571.770674][T21437] vmalloc_user_noprof+0xad/0xf0 [ 571.770704][T21437] ? xskq_create+0xbf/0x170 [ 571.770731][T21437] xskq_create+0xbf/0x170 [ 571.770787][T21437] xsk_init_queue+0xb0/0x110 [ 571.770817][T21437] xsk_setsockopt+0x4dc/0x8d0 [ 571.770846][T21437] ? __pfx_xsk_setsockopt+0x10/0x10 [ 571.770876][T21437] ? __pfx_aa_sk_perm+0x10/0x10 [ 571.770908][T21437] ? aa_sock_opt_perm+0xff/0x1b0 [ 571.770942][T21437] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 571.770969][T21437] ? __pfx_xsk_setsockopt+0x10/0x10 [ 571.770997][T21437] do_sock_setsockopt+0x17c/0x1b0 [ 571.771022][T21437] __x64_sys_setsockopt+0x13f/0x1b0 [ 571.771050][T21437] do_syscall_64+0xfa/0xfa0 [ 571.771077][T21437] ? lockdep_hardirqs_on+0x9c/0x150 [ 571.771105][T21437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.771125][T21437] ? clear_bhb_loop+0x60/0xb0 [ 571.771150][T21437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.771170][T21437] RIP: 0033:0x7f24d318f6c9 [ 571.771189][T21437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.771206][T21437] RSP: 002b:00007f24d40e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 571.771230][T21437] RAX: ffffffffffffffda RBX: 00007f24d33e5fa0 RCX: 00007f24d318f6c9 [ 571.771245][T21437] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 571.771257][T21437] RBP: 00007f24d3211f91 R08: 0000000000000004 R09: 0000000000000000 [ 571.771270][T21437] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.771283][T21437] R13: 00007f24d33e6038 R14: 00007f24d33e5fa0 R15: 00007ffef4b925d8 [ 571.771320][T21437] [ 571.771405][T21437] Mem-Info: [ 572.077626][T21437] active_anon:5869 inactive_anon:0 isolated_anon:0 [ 572.077626][T21437] active_file:2450 inactive_file:40066 isolated_file:0 [ 572.077626][T21437] unevictable:768 dirty:40 writeback:0 [ 572.077626][T21437] slab_reclaimable:12998 slab_unreclaimable:120221 [ 572.077626][T21437] mapped:30231 shmem:1371 pagetables:1353 [ 572.077626][T21437] sec_pagetables:0 bounce:0 [ 572.077626][T21437] kernel_misc_reclaimable:0 [ 572.077626][T21437] free:1304990 free_pcp:14976 free_cma:0 [ 572.128252][T21437] Node 0 active_anon:23476kB inactive_anon:0kB active_file:9800kB inactive_file:160060kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120924kB dirty:160kB writeback:0kB shmem:3948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14500kB pagetables:5172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 572.161803][T21437] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 572.210748][T21437] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 572.244236][T21437] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 572.250479][T21437] Node 0 DMA32 free:1317240kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23576kB inactive_anon:0kB active_file:9800kB inactive_file:160060kB unevictable:1536kB writepending:160kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:40824kB local_pcp:20584kB free_cma:0kB [ 572.284709][T21437] lowmem_reserve[]: 0 0 0 0 0 [ 572.289827][T21437] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 572.320832][T21437] lowmem_reserve[]: 0 0 0 0 0 [ 572.325829][T21437] Node 1 Normal free:3887360kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19200kB local_pcp:5760kB free_cma:0kB [ 572.360240][T21437] lowmem_reserve[]: 0 0 0 0 0 [ 572.365124][T21437] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 572.384549][T21437] Node 0 DMA32: 1651*4kB (UM) 749*8kB (UM) 473*16kB (UME) 640*32kB (UME) 166*64kB (UME) 80*128kB (UM) 53*256kB (UME) 174*512kB (UM) 90*1024kB (UME) 8*2048kB (UME) 255*4096kB (M) = 1317188kB [ 572.409879][T21437] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 572.421998][T21437] Node 1 Normal: 236*4kB (UME) 54*8kB (UME) 48*16kB (UME) 159*32kB (UME) 45*64kB (UME) 13*128kB (UME) 5*256kB (UM) 5*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 944*4096kB (M) = 3887360kB [ 572.441447][T21437] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 572.451694][T21437] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 572.461416][T21437] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 572.477192][T21437] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 572.487562][T21437] 43883 total pagecache pages [ 572.492329][T21437] 0 pages in swap cache [ 572.497163][T21437] Free swap = 124996kB [ 572.501998][T21437] Total swap = 124996kB [ 572.507037][T21437] 2097051 pages RAM [ 572.510998][T21437] 0 pages HighMem/MovableOnly [ 572.516031][T21437] 424119 pages reserved [ 572.520985][T21437] 0 pages cma reserved [ 572.888605][T21481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 572.953553][T21484] __nla_validate_parse: 2 callbacks suppressed [ 572.953573][T21484] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4169'. [ 573.053470][T21489] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4171'. [ 573.162510][T21497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4173'. [ 573.229889][T21501] netlink: 'syz.3.4175': attribute type 3 has an invalid length. [ 573.389145][T21508] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4178'. [ 574.088310][T21531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4185'. [ 574.464082][T21542] netlink: 'syz.2.4187': attribute type 4 has an invalid length. [ 574.477427][T21542] netlink: 'syz.2.4187': attribute type 4 has an invalid length. [ 648.076764][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.557504][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 717.916476][ T31] INFO: task kworker/1:2:875 blocked for more than 143 seconds. [ 717.924271][ T31] Not tainted syzkaller #0 [ 717.929478][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 717.938681][ T31] task:kworker/1:2 state:D stack:24200 pid:875 tgid:875 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 717.951762][ T31] Workqueue: events rfkill_sync_work [ 717.957178][ T31] Call Trace: [ 717.960472][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 717.963399][ T31] __schedule+0x1798/0x4cc0 [ 717.968063][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 717.974570][ T31] ? __pfx___schedule+0x10/0x10 [ 717.979876][ T31] ? schedule+0x91/0x360 [ 717.984166][ T31] schedule+0x165/0x360 [ 717.988631][ T31] schedule_preempt_disabled+0x13/0x30 [ 717.994154][ T31] __mutex_lock+0x7e6/0x1350 [ 718.016285][ T31] ? __mutex_lock+0x5bb/0x1350 [ 718.021135][ T31] ? rfkill_sync_work+0x2e/0x200 [ 718.031703][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 718.057043][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 718.066677][ T31] rfkill_sync_work+0x2e/0x200 [ 718.071511][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 718.079564][ T31] process_scheduled_works+0xae1/0x17b0 [ 718.085183][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 718.091363][ T31] worker_thread+0x8a0/0xda0 [ 718.096003][ T31] kthread+0x711/0x8a0 [ 718.100466][ T31] ? __pfx_worker_thread+0x10/0x10 [ 718.105583][ T31] ? __pfx_kthread+0x10/0x10 [ 718.110339][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 718.115561][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 718.120816][ T31] ? __pfx_kthread+0x10/0x10 [ 718.125434][ T31] ret_from_fork+0x4bc/0x870 [ 718.130399][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 718.135535][ T31] ? __switch_to_asm+0x39/0x70 [ 718.140382][ T31] ? __switch_to_asm+0x33/0x70 [ 718.145162][ T31] ? __pfx_kthread+0x10/0x10 [ 718.150039][ T31] ret_from_fork_asm+0x1a/0x30 [ 718.154860][ T31] [ 718.158481][ T31] INFO: task kworker/1:7:15922 blocked for more than 143 seconds. [ 718.166771][ T31] Not tainted syzkaller #0 [ 718.171753][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 718.180604][ T31] task:kworker/1:7 state:D stack:24456 pid:15922 tgid:15922 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 718.193084][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 718.200522][ T31] Call Trace: [ 718.203825][ T31] [ 718.207101][ T31] __schedule+0x1798/0x4cc0 [ 718.211649][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 718.218287][ T31] ? __pfx___schedule+0x10/0x10 [ 718.223187][ T31] ? schedule+0x91/0x360 [ 718.227658][ T31] schedule+0x165/0x360 [ 718.231866][ T31] schedule_preempt_disabled+0x13/0x30 [ 718.237603][ T31] __mutex_lock+0x7e6/0x1350 [ 718.242230][ T31] ? __mutex_lock+0x5bb/0x1350 [ 718.247297][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 718.253571][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 718.258740][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 718.264504][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 718.270440][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 718.276731][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 718.282448][ T31] process_scheduled_works+0xae1/0x17b0 [ 718.288064][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 718.294160][ T31] worker_thread+0x8a0/0xda0 [ 718.298858][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 718.305213][ T31] ? __kthread_parkme+0x7b/0x200 [ 718.310624][ T31] kthread+0x711/0x8a0 [ 718.314740][ T31] ? __pfx_worker_thread+0x10/0x10 [ 718.320103][ T31] ? __pfx_kthread+0x10/0x10 [ 718.324722][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 718.330002][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 718.335222][ T31] ? __pfx_kthread+0x10/0x10 [ 718.340099][ T31] ret_from_fork+0x4bc/0x870 [ 718.344690][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 718.349989][ T31] ? __switch_to_asm+0x39/0x70 [ 718.354779][ T31] ? __switch_to_asm+0x33/0x70 [ 718.359697][ T31] ? __pfx_kthread+0x10/0x10 [ 718.364318][ T31] ret_from_fork_asm+0x1a/0x30 [ 718.369378][ T31] [ 718.372449][ T31] INFO: task syz.0.4110:21253 blocked for more than 143 seconds. [ 718.380276][ T31] Not tainted syzkaller #0 [ 718.385235][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 718.394080][ T31] task:syz.0.4110 state:D stack:25064 pid:21253 tgid:21244 ppid:16681 task_flags:0x400140 flags:0x00080003 [ 718.406643][ T31] Call Trace: [ 718.409947][ T31] [ 718.412881][ T31] __schedule+0x1798/0x4cc0 [ 718.417535][ T31] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 718.423663][ T31] ? __lock_acquire+0xab9/0xd20 [ 718.428734][ T31] ? __pfx___schedule+0x10/0x10 [ 718.433672][ T31] ? schedule+0x91/0x360 [ 718.438329][ T31] schedule+0x165/0x360 [ 718.442519][ T31] schedule_preempt_disabled+0x13/0x30 [ 718.448061][ T31] __mutex_lock+0x7e6/0x1350 [ 718.452683][ T31] ? __mutex_lock+0x5bb/0x1350 [ 718.457537][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 718.462848][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 718.468244][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 718.473480][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 718.479583][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 718.485963][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 718.491806][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 718.497246][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 718.502990][ T31] rfkill_set_block+0x1d2/0x440 [ 718.507957][ T31] rfkill_fop_write+0x44b/0x570 [ 718.512827][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 718.518342][ T31] ? security_file_permission+0x10/0x290 [ 718.524017][ T31] ? rw_verify_area+0x255/0x4d0 [ 718.529202][ T31] ? __lock_acquire+0xab9/0xd20 [ 718.534083][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 718.539554][ T31] vfs_write+0x27e/0xb30 [ 718.543838][ T31] ? __pfx_vfs_write+0x10/0x10 [ 718.548744][ T31] ? __fget_files+0x2a/0x420 [ 718.553463][ T31] ? __fget_files+0x2a/0x420 [ 718.558660][ T31] ? __fget_files+0x3a0/0x420 [ 718.563376][ T31] ? __fget_files+0x2a/0x420 [ 718.568121][ T31] ksys_write+0x145/0x250 [ 718.572494][ T31] ? __pfx_ksys_write+0x10/0x10 [ 718.577493][ T31] ? do_syscall_64+0xbe/0xfa0 [ 718.582204][ T31] do_syscall_64+0xfa/0xfa0 [ 718.587027][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 718.592262][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.598369][ T31] ? clear_bhb_loop+0x60/0xb0 [ 718.603098][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.609060][ T31] RIP: 0033:0x7fe027d8f6c9 [ 718.613494][ T31] RSP: 002b:00007fe028bff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 718.622218][ T31] RAX: ffffffffffffffda RBX: 00007fe027fe6180 RCX: 00007fe027d8f6c9 [ 718.630270][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000007 [ 718.638367][ T31] RBP: 00007fe027e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 718.646654][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 718.654657][ T31] R13: 00007fe027fe6218 R14: 00007fe027fe6180 R15: 00007ffff5459a88 [ 718.662723][ T31] [ 718.665771][ T31] INFO: task syz.4.4116:21263 blocked for more than 144 seconds. [ 718.677246][ T31] Not tainted syzkaller #0 [ 718.682225][ T31] Blocked by coredump. [ 718.687120][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 718.695815][ T31] task:syz.4.4116 state:D stack:25608 pid:21263 tgid:21254 ppid:15912 task_flags:0x40054c flags:0x00080001 [ 718.708277][ T31] Call Trace: [ 718.711592][ T31] [ 718.714548][ T31] __schedule+0x1798/0x4cc0 [ 718.719282][ T31] ? validate_chain+0x897/0x2140 [ 718.724266][ T31] ? __lock_acquire+0xab9/0xd20 [ 718.729235][ T31] ? __pfx___schedule+0x10/0x10 [ 718.734125][ T31] ? schedule+0x91/0x360 [ 718.738673][ T31] schedule+0x165/0x360 [ 718.742851][ T31] schedule_timeout+0x9a/0x270 [ 718.747730][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 718.753147][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 718.758399][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 718.763624][ T31] ? wait_for_completion+0x267/0x5d0 [ 718.769184][ T31] wait_for_completion+0x2bf/0x5d0 [ 718.774351][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 718.780063][ T31] ? __flush_work+0xd2/0xbc0 [ 718.784699][ T31] ? __flush_work+0xd2/0xbc0 [ 718.789413][ T31] __flush_work+0x9b9/0xbc0 [ 718.793963][ T31] ? __flush_work+0xd2/0xbc0 [ 718.799005][ T31] ? __pfx___flush_work+0x10/0x10 [ 718.804089][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 718.809484][ T31] ? __pfx___cancel_work+0x10/0x10 [ 718.814616][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 718.820334][ T31] __cancel_work_sync+0xbe/0x110 [ 718.825312][ T31] rfkill_unregister+0x92/0x220 [ 718.830519][ T31] nfc_unregister_device+0x96/0x2a0 [ 718.835751][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 718.841579][ T31] virtual_ncidev_close+0x56/0x90 [ 718.846683][ T31] __fput+0x44c/0xa70 [ 718.850671][ T31] task_work_run+0x1d4/0x260 [ 718.855261][ T31] ? __pfx_task_work_run+0x10/0x10 [ 718.860663][ T31] do_exit+0x6b5/0x2300 [ 718.864874][ T31] ? cgroup_freezing+0x20/0x350 [ 718.869802][ T31] ? __pfx_do_exit+0x10/0x10 [ 718.874432][ T31] ? cgroup_freezing+0x20/0x350 [ 718.879513][ T31] ? cgroup_freezing+0x20/0x350 [ 718.884397][ T31] do_group_exit+0x21c/0x2d0 [ 718.889276][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 718.894486][ T31] get_signal+0x1285/0x1340 [ 718.899098][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 718.904671][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 718.910921][ T31] ? __se_sys_futex+0x36f/0x400 [ 718.915825][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 718.921551][ T31] exit_to_user_mode_loop+0x72/0x130 [ 718.927115][ T31] do_syscall_64+0x2bd/0xfa0 [ 718.931728][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 718.937392][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.943485][ T31] ? clear_bhb_loop+0x60/0xb0 [ 718.949221][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.955154][ T31] RIP: 0033:0x7f85ce98f6c9 [ 718.959813][ T31] RSP: 002b:00007f85cf8a30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 718.968339][ T31] RAX: 0000000000000001 RBX: 00007f85cebe6188 RCX: 00007f85ce98f6c9 [ 718.977395][ T31] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f85cebe618c [ 718.985405][ T31] RBP: 00007f85cebe6180 R08: 3fffffffffffffff R09: 0000000000000000 [ 718.993512][ T31] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 719.001625][ T31] R13: 00007f85cebe6218 R14: 00007ffd5b61d9b0 R15: 00007ffd5b61da98 [ 719.010265][ T31] [ 719.013318][ T31] INFO: task syz.3.4181:21515 blocked for more than 144 seconds. [ 719.021804][ T31] Not tainted syzkaller #0 [ 719.026848][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 719.035525][ T31] task:syz.3.4181 state:D stack:25160 pid:21515 tgid:21514 ppid:17084 task_flags:0x400040 flags:0x00080002 [ 719.048525][ T31] Call Trace: [ 719.051862][ T31] [ 719.054803][ T31] __schedule+0x1798/0x4cc0 [ 719.059369][ T31] ? __lock_acquire+0xab9/0xd20 [ 719.064247][ T31] ? __lock_acquire+0xab9/0xd20 [ 719.069217][ T31] ? __pfx___schedule+0x10/0x10 [ 719.074103][ T31] ? schedule+0x91/0x360 [ 719.078875][ T31] schedule+0x165/0x360 [ 719.083045][ T31] schedule_preempt_disabled+0x13/0x30 [ 719.088868][ T31] __mutex_lock+0x7e6/0x1350 [ 719.093492][ T31] ? __mutex_lock+0x5bb/0x1350 [ 719.098364][ T31] ? rfkill_register+0x37/0x8e0 [ 719.103255][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 719.109033][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 719.114439][ T31] ? device_initialize+0x24b/0x440 [ 719.119690][ T31] rfkill_register+0x37/0x8e0 [ 719.124406][ T31] nfc_register_device+0x14a/0x320 [ 719.129764][ T31] nci_register_device+0x87f/0x9d0 [ 719.134898][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 719.141057][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 719.146444][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 719.151836][ T31] virtual_ncidev_open+0x129/0x1a0 [ 719.157115][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 719.162768][ T31] misc_open+0x2d5/0x350 [ 719.167846][ T31] chrdev_open+0x4cc/0x5e0 [ 719.172292][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 719.177272][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 719.183618][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 719.188713][ T31] do_dentry_open+0x953/0x13f0 [ 719.193518][ T31] vfs_open+0x3b/0x340 [ 719.198646][ T31] ? path_openat+0x2ecd/0x3830 [ 719.203455][ T31] path_openat+0x2ee5/0x3830 [ 719.208158][ T31] ? __pfx_path_openat+0x10/0x10 [ 719.213142][ T31] do_filp_open+0x1fa/0x410 [ 719.217737][ T31] ? __lock_acquire+0xab9/0xd20 [ 719.222621][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 719.228426][ T31] ? _raw_spin_unlock+0x28/0x50 [ 719.233354][ T31] ? alloc_fd+0x64c/0x6c0 [ 719.237757][ T31] do_sys_openat2+0x121/0x1c0 [ 719.242451][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 719.247758][ T31] ? rcu_is_watching+0x15/0xb0 [ 719.252545][ T31] __x64_sys_openat+0x138/0x170 [ 719.257964][ T31] do_syscall_64+0xfa/0xfa0 [ 719.262501][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 719.267847][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.273936][ T31] ? clear_bhb_loop+0x60/0xb0 [ 719.278919][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.284857][ T31] RIP: 0033:0x7f24d318f6c9 [ 719.289826][ T31] RSP: 002b:00007f24d40e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 719.298297][ T31] RAX: ffffffffffffffda RBX: 00007f24d33e5fa0 RCX: 00007f24d318f6c9 [ 719.306753][ T31] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 719.314756][ T31] RBP: 00007f24d3211f91 R08: 0000000000000000 R09: 0000000000000000 [ 719.323336][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 719.331376][ T31] R13: 00007f24d33e6038 R14: 00007f24d33e5fa0 R15: 00007ffef4b925d8 [ 719.339455][ T31] [ 719.342526][ T31] INFO: task syz.1.4184:21526 blocked for more than 144 seconds. [ 719.350933][ T31] Not tainted syzkaller #0 [ 719.355889][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 719.364717][ T31] task:syz.1.4184 state:D stack:28296 pid:21526 tgid:21525 ppid:17528 task_flags:0x400040 flags:0x00080002 [ 719.377267][ T31] Call Trace: [ 719.380577][ T31] [ 719.383508][ T31] __schedule+0x1798/0x4cc0 [ 719.388095][ T31] ? security_file_open+0xb1/0x270 [ 719.393243][ T31] ? __lock_acquire+0xab9/0xd20 [ 719.398174][ T31] ? __lock_acquire+0xab9/0xd20 [ 719.403042][ T31] ? __pfx___schedule+0x10/0x10 [ 719.408497][ T31] ? schedule+0x91/0x360 [ 719.412804][ T31] schedule+0x165/0x360 [ 719.417261][ T31] schedule_preempt_disabled+0x13/0x30 [ 719.422749][ T31] __mutex_lock+0x7e6/0x1350 [ 719.427429][ T31] ? __mutex_lock+0x5bb/0x1350 [ 719.432223][ T31] ? misc_open+0x51/0x350 [ 719.437410][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 719.442485][ T31] misc_open+0x51/0x350 [ 719.446694][ T31] chrdev_open+0x4cc/0x5e0 [ 719.451217][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 719.456238][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 719.462683][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 719.468334][ T31] do_dentry_open+0x953/0x13f0 [ 719.473154][ T31] vfs_open+0x3b/0x340 [ 719.477291][ T31] ? path_openat+0x2ecd/0x3830 [ 719.482080][ T31] path_openat+0x2ee5/0x3830 [ 719.486804][ T31] ? __pfx_path_openat+0x10/0x10 [ 719.491807][ T31] do_filp_open+0x1fa/0x410 [ 719.497064][ T31] ? __lock_acquire+0xab9/0xd20 [ 719.501949][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 719.507063][ T31] ? _raw_spin_unlock+0x28/0x50 [ 719.511941][ T31] ? alloc_fd+0x64c/0x6c0 [ 719.518867][ T31] do_sys_openat2+0x121/0x1c0 [ 719.523590][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 719.529279][ T31] ? exc_page_fault+0x82/0x100 [ 719.534437][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 719.540446][ T31] __x64_sys_openat+0x138/0x170 [ 719.545313][ T31] do_syscall_64+0xfa/0xfa0 [ 719.549947][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 719.555201][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.561315][ T31] ? clear_bhb_loop+0x60/0xb0 [ 719.566816][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.572737][ T31] RIP: 0033:0x7f5ce278f6c9 [ 719.577248][ T31] RSP: 002b:00007f5ce3541038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 719.585715][ T31] RAX: ffffffffffffffda RBX: 00007f5ce29e5fa0 RCX: 00007f5ce278f6c9 [ 719.593756][ T31] RDX: 0000000000048241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 719.602680][ T31] RBP: 00007f5ce2811f91 R08: 0000000000000000 R09: 0000000000000000 [ 719.610777][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 719.618803][ T31] R13: 00007f5ce29e6038 R14: 00007f5ce29e5fa0 R15: 00007ffce407a108 [ 719.627319][ T31] [ 719.630397][ T31] [ 719.630397][ T31] Showing all locks held in the system: [ 719.638711][ T31] 1 lock held by khungtaskd/31: [ 719.643608][ T31] #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 719.653653][ T31] 3 locks held by kworker/1:2/875: [ 719.659440][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 719.670622][ T31] #1: ffffc90003207ba0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 719.683241][ T31] #2: ffffffff8f5ab428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 719.693892][ T31] 2 locks held by getty/5592: [ 719.698636][ T31] #0: ffff88802fcf10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 719.708508][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 719.719248][ T31] 1 lock held by syz-executor/15912: [ 719.724531][ T31] #0: ffffffff8f5ab428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 719.734670][ T31] 3 locks held by kworker/1:7/15922: [ 719.740002][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 719.751651][ T31] #1: ffffc9000b827ba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 719.765370][ T31] #2: ffffffff8f5ab428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 719.777434][ T31] 1 lock held by udevd/17077: [ 719.782212][ T31] #0: ffff888025115358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 719.791503][ T31] 2 locks held by syz.0.4110/21253: [ 719.796747][ T31] #0: ffffffff8f5ab428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 719.807385][ T31] #1: ffff8880270a9100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 719.817123][ T31] 1 lock held by syz.4.4116/21263: [ 719.822247][ T31] #0: ffff8880270a9100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 719.832049][ T31] 3 locks held by syz.3.4181/21515: [ 719.838094][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 719.847024][ T31] #1: ffff8880216de100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 719.856698][ T31] #2: ffffffff8f5ab428 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 719.867361][ T31] 1 lock held by syz.1.4184/21526: [ 719.872516][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 719.881044][ T31] 1 lock held by syz.2.4191/21550: [ 719.886420][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 719.894888][ T31] 1 lock held by syz-executor/21556: [ 719.900759][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 719.909299][ T31] 1 lock held by syz-executor/21557: [ 719.914616][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 719.923206][ T31] 1 lock held by syz-executor/21559: [ 719.928962][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 719.937495][ T31] 1 lock held by syz-executor/21561: [ 719.942818][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 719.951326][ T31] 1 lock held by syz-executor/21563: [ 719.957062][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 719.965506][ T31] 1 lock held by syz-executor/21568: [ 719.970836][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 719.979397][ T31] 1 lock held by syz-executor/21569: [ 719.984715][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 719.993788][ T31] 1 lock held by syz-executor/21571: [ 719.999368][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 720.008055][ T31] 1 lock held by syz-executor/21573: [ 720.013352][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 720.022472][ T31] 1 lock held by syz-executor/21575: [ 720.027819][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 720.036350][ T31] 1 lock held by syz-executor/21580: [ 720.041622][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 720.050761][ T31] 1 lock held by syz-executor/21581: [ 720.056153][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 720.064657][ T31] 1 lock held by syz-executor/21583: [ 720.069963][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 720.078929][ T31] 1 lock held by syz-executor/21585: [ 720.084205][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 720.092748][ T31] 1 lock held by syz-executor/21587: [ 720.098129][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 720.107513][ T31] [ 720.109888][ T31] ============================================= [ 720.109888][ T31] [ 720.118434][ T31] NMI backtrace for cpu 1 [ 720.118451][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 720.118471][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 720.118483][ T31] Call Trace: [ 720.118490][ T31] [ 720.118498][ T31] dump_stack_lvl+0x189/0x250 [ 720.118531][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 720.118556][ T31] ? __pfx__printk+0x10/0x10 [ 720.118603][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 720.118629][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 720.118653][ T31] ? __pfx__printk+0x10/0x10 [ 720.118677][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 720.118708][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 720.118733][ T31] watchdog+0xf60/0xfa0 [ 720.118758][ T31] ? watchdog+0x1e2/0xfa0 [ 720.118785][ T31] kthread+0x711/0x8a0 [ 720.118813][ T31] ? __pfx_watchdog+0x10/0x10 [ 720.118829][ T31] ? __pfx_kthread+0x10/0x10 [ 720.118856][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 720.118880][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 720.118905][ T31] ? __pfx_kthread+0x10/0x10 [ 720.118931][ T31] ret_from_fork+0x4bc/0x870 [ 720.118956][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 720.118984][ T31] ? __switch_to_asm+0x39/0x70 [ 720.118999][ T31] ? __switch_to_asm+0x33/0x70 [ 720.119013][ T31] ? __pfx_kthread+0x10/0x10 [ 720.119039][ T31] ret_from_fork_asm+0x1a/0x30 [ 720.119074][ T31] [ 720.119081][ T31] Sending NMI from CPU 1 to CPUs 0: [ 720.266898][ C0] NMI backtrace for cpu 0 [ 720.266916][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 720.266934][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 720.266943][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 720.266968][ C0] RIP: 0010:rcu_is_watching+0x74/0xb0 [ 720.266986][ C0] Code: 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d 79 ff c7 10 74 11 83 e0 04 c1 e8 02 5b 41 5e 41 5f d7 f3 a2 09 cc e8 91 e7 8c ff eb e8 48 c7 c7 40 33 f4 8d 48 89 [ 720.267000][ C0] RSP: 0018:ffffc90000127388 EFLAGS: 00000202 [ 720.267013][ C0] RAX: 0000000000000001 RBX: ffffffff908ebf01 RCX: 797095e297bda300 [ 720.267024][ C0] RDX: ffffc90000127501 RSI: ffffffff8bbf0740 RDI: ffffffff8bbf0700 [ 720.267034][ C0] RBP: dffffc0000000000 R08: ffffc90000127940 R09: 0000000000000000 [ 720.267045][ C0] R10: ffffc90000127518 R11: fffff52000024ea5 R12: ffffc90000127950 [ 720.267055][ C0] R13: ffffffff81738d25 R14: ffffffff8df3d660 R15: ffffffff81738d25 [ 720.267067][ C0] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 720.267080][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 720.267090][ C0] CR2: 00007f50afe129b7 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 720.267106][ C0] Call Trace: [ 720.267113][ C0] [ 720.267118][ C0] lock_release+0x4b/0x3e0 [ 720.267135][ C0] ? deref_stack_reg+0x19f/0x230 [ 720.267155][ C0] ? unwind_next_frame+0xa5/0x2390 [ 720.267171][ C0] unwind_next_frame+0x19a9/0x2390 [ 720.267191][ C0] ? unwind_next_frame+0xa5/0x2390 [ 720.267207][ C0] ? skb_release_data+0x62d/0x7c0 [ 720.267227][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 720.267246][ C0] arch_stack_walk+0x11c/0x150 [ 720.267267][ C0] ? consume_skb+0x9e/0xf0 [ 720.267282][ C0] stack_trace_save+0x9c/0xe0 [ 720.267300][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 720.267318][ C0] ? chacha_block_generic+0x53/0xc80 [ 720.267341][ C0] kasan_save_track+0x3e/0x80 [ 720.267360][ C0] ? kasan_save_track+0x3e/0x80 [ 720.267377][ C0] ? __kasan_save_free_info+0x46/0x50 [ 720.267412][ C0] ? __kasan_slab_free+0x5c/0x80 [ 720.267431][ C0] ? kfree+0x19a/0x6d0 [ 720.267447][ C0] ? skb_release_data+0x62d/0x7c0 [ 720.267486][ C0] __kasan_save_free_info+0x46/0x50 [ 720.267503][ C0] __kasan_slab_free+0x5c/0x80 [ 720.267522][ C0] ? skb_release_data+0x62d/0x7c0 [ 720.267537][ C0] kfree+0x19a/0x6d0 [ 720.267557][ C0] skb_release_data+0x62d/0x7c0 [ 720.267577][ C0] consume_skb+0x9e/0xf0 [ 720.267590][ C0] nsim_dev_trap_report_work+0x7cf/0xb80 [ 720.267615][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 720.267632][ C0] process_scheduled_works+0xae1/0x17b0 [ 720.267661][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 720.267685][ C0] worker_thread+0x8a0/0xda0 [ 720.267712][ C0] kthread+0x711/0x8a0 [ 720.267733][ C0] ? __pfx_worker_thread+0x10/0x10 [ 720.267748][ C0] ? __pfx_kthread+0x10/0x10 [ 720.267767][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 720.267793][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 720.267811][ C0] ? __pfx_kthread+0x10/0x10 [ 720.267830][ C0] ret_from_fork+0x4bc/0x870 [ 720.267846][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 720.267864][ C0] ? __switch_to_asm+0x39/0x70 [ 720.267878][ C0] ? __switch_to_asm+0x33/0x70 [ 720.267889][ C0] ? __pfx_kthread+0x10/0x10 [ 720.267908][ C0] ret_from_fork_asm+0x1a/0x30 [ 720.267928][ C0]